Description
It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user privilege can exploit this vulnerability to modify substitute agent to arbitrary users, resulting in serious consequence.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Status Internet | PowerBPM | 2.0 | — |