CVE-2012-4021

{"id": "CVE-2012-4021", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-11-08T11:46:24.143", "references": [{"url": "http://jvn.jp/en/jp/JVN52264310/index.html", "source": "vultures@jpcert.or.jp"}, {"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2012-000097", "source": "vultures@jpcert.or.jp"}, {"url": "http://secunia.com/advisories/51110", "source": "vultures@jpcert.or.jp"}, {"url": "http://www.securityfocus.com/bid/56369", "source": "vultures@jpcert.or.jp"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "MosP kintai kanri before 4.1.0 does not properly perform authentication, which allows remote authenticated users to impersonate arbitrary user accounts, and consequently obtain sensitive information or modify settings, via unspecified vectors."}, {"lang": "es", "value": "MosP Kintai kanri antes de v4.1.0 no realiza correctamente la autenticaci\u00f3n, lo que permite suplantar cuentas de usuario de su elecci\u00f3n a usuarios remotos autenticados, y en consecuencia les permite obtener informaci\u00f3n sensible o modificar la configuraci\u00f3n, a trav\u00e9s de vectores no especificados."}], "lastModified": "2013-03-02T04:44:58.603", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mosp:kintai_kanri:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83EE0C90-5D5E-42E3-B32B-D122C427F1EF", "versionEndIncluding": "4.0.9"}], "operator": "OR"}]}], "sourceIdentifier": "vultures@jpcert.or.jp"}