Vulnerability CVE-2024-9970
Published: 2024-10-15

Description:
The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie.

Type:

CWE-565

 (Reliance on Cookies without Validation and Integrity Checking)

 References:
https://www.twcert.org.tw/tw/cp-132-8136-4d5b4-1.html
https://www.twcert.org.tw/en/cp-139-8137-ea537-2.html
Copyright 2024, cxsecurity.com

 

Back to Top