PT-2022-27006 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions prior to 8.5.10 Concrete CMS versions 9.0.0 through 9.1.2 Description: The issue is related to the use of non-strict comparison for the legacy salt, which could lead to limited authentication bypass if this functionality...