LumisXP 16.1.x Hardcoded Credentials / IDOR

===== Tempest Security Intelligence - ADV-6/2024 ========================== LumisXP v15.0.x to v16.1.x Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil ===== Table of Contents================================================== Overview Detailed description Timeli...

CVE-2024-33329

LumisXP versions v15.0.x through v16.1.x are vulnerable to authentication bypass due to the use of hard-coded credentials (CWE-798). A hardcoded privileged ID allows an attacker to bypass security controls to access internal pages and other sensitive information. As a temporary workaround, it is ...

CVE-2024-33329

A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass authentication and access internal pages and other sensitive information...