CVE-2021-43935

CVE-2021-43935 describes an authentication bypass vulnerability in Hillrom Welch Allyn Cardio Products when SSO is enabled. The ICSMA-21-343-01 advisory confirms an improper authentication issue (CWE-288) that allows an AD account to access the application without a password, granting privileges ...