Description
Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user account to acquire arbitrary account privilege, and access, manipulate system or disrupt service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FLOWRING | Agentflow BPM | 4.0.0.1183.552 | — |