CVE-2024-29078

2024-05-2800:15:08

[email protected]

web.nvd.nist.gov

cve-2024-29078

critical resource issue

remote attacker

unauthenticated access

product settings alteration

nvd

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthenticated attacker with access to the product to alter the product settings.

Affected configurations

Vulners

Node

esmind\,_llcmosp_kintai_kanriMatch4.6.6

CNA Affected

[
  {
    "vendor": "esMind, LLC",
    "product": "MosP kintai kanri",
    "versions": [
      {
        "version": "V4.6.6 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN97751842/

www.e-s-mind.com/2024-02-20/