CVE-2022-39038

Name of the Vulnerable Software and Affected Versions Agentflow BPM enterprise management system (affected versions not specified)

Description The issue is related to improper authentication in the Agentflow BPM enterprise management system. A remote attacker with general user privilege can exploit this by changing the name of the user account to acquire arbitrary account privilege. This allows the attacker to access, manipulate the system, or disrupt the service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.