MosP kintai kanri before 4.1.0 does not enforce privilege requirements, which allows remote authenticated users to read other users information via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kintai_kanri | Mosp | * | 4.0.9 (including) |
References
- http://jvn.jp/en/jp/JVN23465354/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000096
- http://secunia.com/advisories/51110
- http://www.securityfocus.com/bid/56368
- http://jvn.jp/en/jp/JVN23465354/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000096
- http://secunia.com/advisories/51110
- http://www.securityfocus.com/bid/56368