Security Advisory
CVE-2024-9970
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie.