Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-39038

FLOWRING Agentflow BPM - Broken Access Control

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user account to acquire arbitrary account privilege, and access, manipulate system or disrupt service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FLOWRING Agentflow BPM

  • 4.0.0.1183.552affected

References