Description
Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information.
References
- ADV-2007-1162 vdb-entry
- 23198 vdb-entry
- aisan-unspecified-privilege-escalation(33341) vdb-entry
- 34518 vdb-entry
- JVN#73258608 third-party-advisory
- http://www.aisantec.co.jp/mof/index.html
- 24691 third-party-advisory