Yenthe Van Ginneken

The issue is related to improper access control, allowing remote authenticated users to trigger the creation of demonstration data. This includes user accounts with known credentials.

The issue is related to incorrect access control in the database manager component, allowing a remote attacker to restore a database dump without knowing the super-admin password. Any arbitrary password can succeed in this action.