CVE-2012-4020 in kintai kanri

Summary

MosP kintai kanri before 4.1.0 does not enforce privilege requirements, which allows remote authenticated users to read other users information via unspecified vectors.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 07/12/2012
• Disclosure: 11/08/2012
• Moderation: VulDB entry created
• Entries: 1: VDB-62885
• CPE: ready
• CWE: CWE-264 (Confirmed)
• CVSS: 4.3
• EPSS: 0.00225
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4020
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4020
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4020/