The vulnerability of the GreaterWMS software lies in its ability to bypass authentication procedures, allowing attackers to circumvent the authentication process and gain increased privileges.

The vulnerability of the GreaterWMS software relates to the bypassing of the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process and enhance their privileges...

CVE-2025-26201

Credential disclosure vulnerability via the /staff route in GreaterWMS = 2.1.49 allows a remote unauthenticated attackers to bypass authentication and escalate privileges...

CVE-2025-26201

Credential disclosure vulnerability via the /staff route in GreaterWMS = 2.1.49 allows a remote unauthenticated attackers to bypass authentication and escalate privileges...

CVE-2025-26201

Credential disclosure vulnerability via the /staff route in GreaterWMS = 2.1.49 allows a remote unauthenticated attackers to bypass authentication and escalate privileges...

CVE-2025-26201

The GreaterWMS inventory management system (versions

CVE-2025-26201

Credential disclosure vulnerability via the /staff route in GreaterWMS = 2.1.49 allows a remote unauthenticated attackers to bypass authentication and escalate privileges...

PT-2025-7775

Name of the Vulnerable Software and Affected Versions GreaterWMS versions = 2.1.49 Description The issue is a credential disclosure vulnerability via the "/staff" route, allowing remote unauthenticated attackers to bypass authentication and escalate privileges. Recommendations For GreaterWMS...

CVE-2025-26201: Authentication Bypass by Capture-replay

Credential disclosure vulnerability via the /staff route in GreaterWMS = 2.1.49 allows a remote unauthenticated attackers to bypass authentication and escalate privileges...

GreaterWMS 安全漏洞

GreaterWMS is an inventory management system from GreaterWMS open source. A security vulnerability exists in GreaterWMS version 2.1.49 and prior versions that stems from /staff routing not being handled correctly, allowing an unauthenticated attacker to bypass authentication and elevate privilege...