Trevor Kaon

The system accepts unauthenticated requests via the management API endpoint '/bss/sysmgnt/api/'. This allows a remote attacker to provision new accounts with administrative privileges, take over existing accounts, or perform other administrative actions.

An issue exists where the system fails to correctly verify cryptographic signatures for JSON Web Tokens (JWT), which are compact, URL-safe means of representing claims to be transferred between two parties. A remote, unauthenticated attacker could forge a well-formed JWT without a valid signature to execute privileged actions.