CVE-2021-27963: Missing Authentication for Critical Function

SonLogger before 6.4.1 is affected by user creation with any user permissions profile e.g., SuperAdmin. An anonymous user can send a POST request to /User/saveUser without any authentication or session header...

PT-2021-17696

Name of the Vulnerable Software and Affected Versions: SonLogger versions prior to 6.4.1 Description: The issue allows an anonymous user to create a new user with any user permissions profile, such as SuperAdmin, by sending a POST request to the /User/saveUser endpoint without any authentication ...