Security Advisory
CVE-2022-39038
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user account to acquire arbitrary account privilege, and access, manipulate system or disrupt service.