MosP kintai kanri before 4.1.0 does not enforce privilege requirements, which allows remote authenticated users to read other users information via unspecified vectors.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Kintai_kanri | Mosp | * | 4.0.9 (including) |