Remote code execution

On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve remote code execution via Argument Injection in the server-to-server module...

PT-2023-31169 · Wolters Kluwer · Wolters Kluwer B.Point

Name of the Vulnerable Software and Affected Versions: Wolters Kluwer B.POINT version 23.70.00 Description: The issue allows a validated system user to achieve remote code execution via Argument Injection in the server-to-server module during the authentication phase. Recommendations: For version...

Wolters Kluwer B.POINT Security Vulnerability

Wolters Kluwer B.POINT is a solution for accountants and employment consultants from Wolters Kluwer Netherlands. A security vulnerability exists in Wolters Kluwer B.POINT version 23.70.00. An attacker can exploit the vulnerability to remotely execute code...