haxpunk1337/MicroStrategy-Enterprise-Manager-2022

haxpunk1337/MicroStrategy-Enterprise-Manager-2022

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-29596↗
9.8 CRITICAL7.5 HIGH

MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../windows/win.ini%00.jpg&Pwd=_any_password_&ConnMode=1&3054=Login substring for directory traversal.