Lucene search
Japan Vulnerability NotesJVN:23465354HistoryNov 02, 2012 - 12:00 a.m.
JVN#23465354: MosP kintai kanri fails to restrict access permissions
2012-11-0200:00:00
Japan Vulnerability Notes
jvn.jp
20
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
EPSS
0.002
Percentile
61.2%
MosP kintai kanri is an open source attendance management software. MosP kintai kanri contains an issue where access permissions are not restricted.
Impact
A user’s information may be obtained by another user with a MosP kintai kanri account.
Solution
Update the software
Update to the latest version according to the information provided by the developer.
Products Affected
- MosP kintai kanri prior to V4.1.0
Related
cvelist
cvelist
CVE-2012-4020
2012-11-08 11:00:00
prion
prion
Code injection
2012-11-08 11:46:00
cve
cve
CVE-2012-4020
2012-11-08 11:46:24
nvd
nvd
CVE-2012-4020
2012-11-08 11:46:24
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
EPSS
0.002
Percentile
61.2%
Related for JVN:23465354