CVE-2024-46607

Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values as the username and password via the loginAdmin method in the UserController.java file...

CVE-2024-46607

Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values as the username and password via the loginAdmin method in the UserController.java file...

CVE-2024-46607

The content management system IceCMS (versions 3.4.7 and earlier) is susceptible to an incorrect access control vulnerability. The root cause lies in the loginAdmin method within the UserController.java file, which allows an attacker to bypass authentication by providing arbitrary values for the ...