CVE-2014-4198

2020-02-1318:28:50

mitre

www.cve.org

9.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.1%

JSON

A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that neglects the use of ADPswID and AD parameters, which could let a malicious user access privileged function.

References

www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt