CVE-2017-16776

Name of the Vulnerable Software and Affected Versions Conserus Workflow Intelligence version 2.0.2

Description The issue allows an attacker to bypass authentication and escalate privileges of valid users by sending a malicious HTTP GET request. This enables an unauthenticated attacker to gain limited access to other accounts, while an authenticated attacker can gain access reserved for higher privilege users.

Recommendations For Conserus Workflow Intelligence version 2.0.2, consider restricting access to sensitive areas of the application until a patch is available. As a temporary workaround, limit the privileges of all users to minimize the risk of exploitation.