CVE-2022-29596

MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../windows/win.ini%00.jpg=anypassword=1&3054=Login substring for directory traversal...

CVE-2022-29596

MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../windows/win.ini%00.jpg&Pwd=anypassword&ConnMode=1&3054=Login substring for directory traversal...

PT-2022-19716 · Microstrategy · Microstrategy Enterprise Manager

Name of the Vulnerable Software and Affected Versions: MicroStrategy Enterprise Manager version 2022 Description: The issue allows authentication bypass by triggering a login failure and then entering a specific substring for directory traversal. This can be achieved by entering...

MicroStrategy Enterprise Manager 路径遍历漏洞

MicroStrategy Enterprise Manager is a tool from MicroStrategy, Inc. that provides reports and dashboards. It displays statistics on the usage of MicroStrategy software. A security vulnerability exists in MicroStrategy Enterprise Manager, which can be exploited by an attacker to bypass...

CVE-2022-29596: Improper Limitation of a Pathname to a Restricted Directory

MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../windows/win.ini%00.jpg&Pwd=anypassword&ConnMode=1&3054=Login substring for directory traversal...