This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.
The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Link | Tags |
---|---|
https://thrive.trellix.com/s/article/000013870 | permissions required |