{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000097.html",
  "dc:date": "2012-11-02T14:18+09:00",
  "dcterms:issued": "2012-11-02T14:18+09:00",
  "dcterms:modified": "2012-11-02T14:18+09:00",
  "description": "MosP kintai kanri contains an authentication bypass vulnerability.\r\n\r\nMosP kintai kanri is an open source attendance management software. MosP kintai kanri contains an authentication bypass vulnerability.\r\n\r\nMasako Ohno reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000097.html",
  "sec:cpe": {
    "#text": "cpe:/a:mosp:kintai_kanri",
    "@product": "MosP kintai kanri",
    "@vendor": "MIND CO.,LTD.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "6.5",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2012-000097",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN52264310/index.html",
      "@id": "JVN#52264310",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4021",
      "@id": "CVE-2012-4021",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4021",
      "@id": "CVE-2012-4021",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-264",
      "@title": "Permissions(CWE-264)"
    }
  ],
  "title": "MosP kintai kanri vulnerable to authentication bypass"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000096.html",
  "dc:date": "2012-11-02T14:16+09:00",
  "dcterms:issued": "2012-11-02T14:16+09:00",
  "dcterms:modified": "2012-11-02T14:16+09:00",
  "description": "MosP kintai kanri contains an issue where access permissions are not restricted.\r\n\r\nMosP kintai kanri is an open source attendance management software. MosP kintai kanri contains an issue where access permissions are not restricted.\r\n\r\nMasako Ohno reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000096.html",
  "sec:cpe": {
    "#text": "cpe:/a:mosp:kintai_kanri",
    "@product": "MosP kintai kanri",
    "@vendor": "MIND CO.,LTD.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2012-000096",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN23465354/index.html",
      "@id": "JVN#23465354",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4020",
      "@id": "CVE-2012-4020",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4020",
      "@id": "CVE-2012-4020",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-264",
      "@title": "Permissions(CWE-264)"
    }
  ],
  "title": "MosP kintai kanri fails to restrict access permissions"
}