CVE-2012-3822 - Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which a

CVE-2012-3822

Summary

Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials.

References

http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/79509

Vulnerable Configurations

cpe:2.3:a:arialsoftware:campaign_enterprise:*:*:*:*:*:*:*:*
cpe:2.3:a:arialsoftware:campaign_enterprise:*:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 15-01-2020 - 19:31)
Impact:
Exploitability:

CWE

CWE-863

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

refmap via4

misc	http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html
xf	79509

Last major update

15-01-2020 - 19:31

Published

10-01-2020 - 17:15

Last modified

15-01-2020 - 19:31