CVE-2024-33329

A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass authentication and access internal pages and other sensitive information...

CVE-2024-33329

LumisXP versions v15.0.x through v16.1.x are vulnerable to authentication bypass due to the use of hard-coded credentials (CWE-798). A hardcoded privileged ID allows an attacker to bypass security controls to access internal pages and other sensitive information. As a temporary workaround, it is ...