Erwin Van Der Ploeg

The issue is related to incorrect access control in the database manager component, allowing a remote attacker to restore a database dump without knowing the super-admin password. Any arbitrary password can succeed in this action.