high7.5
CVE-2012-3822
Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials.
Impact
Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arialsoftware | Campaign Enterprise | before 11.0.551 |
Weakness classification
References
- NVD record
- CVE.org record
- http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79509
- http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79509