JVN#52264310: MosP kintai kanri vulnerable to authentication bypass

MosP kintai kanri is an open source attendance management software. MosP kintai kanri contains an authentication bypass vulnerability.

Impact

An attacker with a MosP kintai kanri account may impersonate another user. As a result, information may be obtained and settings may be altered with the privilege of the user.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

• MosP kintai kanri prior to V4.1.0