Every CVE Search/ Get API key

CVE-2012-4021

MosP kintai kanri before 4.1.0 does not properly perform authentication, which allows remote...

5.5 Medium

MosP kintai kanri before 4.1.0 does not properly perform authentication, which allows remote authenticated users to impersonate arbitrary user accounts, and consequently obtain sensitive information or modify settings, via unspecified vectors.

Exploit likelihood

1.14%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.5

MosP kintai kanri before 4.1.0 does not properly perform authentication, which allows remote authenticated users to impersonate arbitrary user accounts, and consequently obtain sensitive information or modify settings, via unspecified vectors.

Record
CVE-2012-4021
CVSS 2.0
5.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:N
Weakness
CWE-287
Updated
2026-11-02
CVE List No score

MosP kintai kanri before 4.1.0 does not properly perform authentication, which allows remote authenticated users to impersonate arbitrary user accounts, and consequently obtain sensitive information or modify settings, via unspecified vectors.

Record
CVE-2012-4021
Updated
2026-11-02
EUVDEUVD-2012-3965 No score

MosP kintai kanri before 4.1.0 does not properly perform authentication, which allows remote authenticated users to impersonate arbitrary user accounts, and consequently obtain sensitive information or modify settings, via unspecified vectors.

Record
EUVD-2012-3965
Updated
2026-11-03
GitHub AdvisoriesGHSA-89cq-9945-52x8 No score

MosP kintai kanri before 4.1.0 does not properly perform authentication, which allows remote...

MosP kintai kanri before 4.1.0 does not properly perform authentication, which allows remote authenticated users to impersonate arbitrary user accounts, and consequently obtain sensitive information or modify settings, via unspecified vectors.

Record
GHSA-89cq-9945-52x8
Weakness
CWE-287
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-4021 is a medium vulnerability (CVSS 5.5) in Mosp Kintai Kanri, published November 8, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.14%, the 66th percentile. No source names a fixed version.

References

MoveEnter Open