CVE-2024-23733

creationtimestamp| type| source ---|---|--- 2025-01-29 21:26:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113913758202688884 2025-01-29 21:31:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113913776866243979 2025-01-29 22:15:58+00:00| seen|...

CVE-2024-23733

The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before CoreFix7 allows remote attackers to reach the administration panel and discover hostname and version information by sending an arbitrary username and a blank password to the...

CVE-2024-23733

Software AG webMethods API Integration Server version 10.15.0 (specifically version 10.15.0.0000-0092 ) is vulnerable to an Incorrect Access Control flaw. An attacker can reach the administration panel by sending an arbitrary username and a blank password to the /WmAdmin/#/login/ URI. This allows...

CVE-2024-23733

The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before CoreFix7 allows remote attackers to reach the administration panel and discover hostname and version information by sending an arbitrary username and a blank password to the...