Vulnerability Description
MosP kintai kanri before 4.1.0 does not enforce privilege requirements, which allows remote authenticated users to read other users' information via unspecified vectors.
CVSS Score
4.0
MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mosp | Kintai Kanri | <= 4.0.9 |
Related Weaknesses (CWE)
References
- http://jvn.jp/en/jp/JVN23465354/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000096
- http://secunia.com/advisories/51110
- http://www.securityfocus.com/bid/56368
- http://jvn.jp/en/jp/JVN23465354/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000096
- http://secunia.com/advisories/51110
- http://www.securityfocus.com/bid/56368
FAQ
What is CVE-2012-4020?
CVE-2012-4020 is a vulnerability with a CVSS score of 4.0 (MEDIUM). MosP kintai kanri before 4.1.0 does not enforce privilege requirements, which allows remote authenticated users to read other users' information via unspecified vectors.
How severe is CVE-2012-4020?
CVE-2012-4020 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-4020?
Check the references section above for vendor advisories and patch information. Affected products include: Mosp Kintai Kanri.