CVE-2024-29078

2024-05-2723:52:11

jpcert

github.com

cve-2024-29078

permission assignment

resource issue

mosp kintai kanri

unauthorized access

product settings

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthenticated attacker with access to the product to alter the product settings.

CNA Affected

[
  {
    "vendor": "esMind, LLC",
    "product": "MosP kintai kanri",
    "versions": [
      {
        "status": "affected",
        "version": "V4.6.6 and earlier"
      }
    ]
  }
]