CVE-2012-4020 MosP kintai kanri before 4.1.0 does not enforce privilege requirements, which allows remote authenticated users to read other users' information via unspecified vectors.
MediumCVSS 4.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MosP kintai kanri before 4.1.0 does not enforce privilege requirements, which allows remote authenticated users to read other users' information via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mosp kintai kanri | <= 4.0.9 | No fix listed |
References
- JVN#23465354 third-party-advisory
- JVNDB-2012-000096 third-party-advisory
- 51110 third-party-advisory
- 56368 vdb-entry