CVE-2019-16652

The CVE-2019-16652 entry concerns Genius Bytes Genius Server (Genius CDDS) BPM component, version 3.2.2, where remote authenticated users can execute arbitrary commands. Multiple connected sources (CNVD-2020-27220; RH: CVE-2019-16652; NVD; CVE records) corroborate that a code/injection-style path...

CVE-2019-16653

Genius Bytes Genius Server (Genius CDDS) 3.2.2 contains an elevation of privilege issue in the usrInternalUsrCRUD plugin. Remote authenticated users can gain administrator privileges. Documented across NVD and regional advisories; exploitation details and fixes are not provided in the supplied so...