CVE-2016-5654

Misys FusionCapital Opics Plus is affected by CVE-2016-5654. A remote authenticated attacker could exploit a man-in-the-middle to tamper with the xmlMessageOut parameter and escalate privileges to administrator. The issue is tied to Misys FusionCapital Opics Plus and is described in CNVD/CERT ent...