Skip to content

CVE-2012-3822 Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials.

HighCVSS 7.5 EPSS 1.9%
Published
Updated
Exploit status
No public exploit known

Description

Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials.

Affected products

ProductAffected versionsFixed in
arialsoftware campaign enterprise < 11.0.551 11.0.551

References