CVE-2014-4198

Name of the Vulnerable Software and Affected Versions BS-Client Private Client versions 2.4 through 2.5

Description A Two-Factor Authentication Bypass issue exists, allowing a malicious user to access privileged functions via an XML request. This request neglects the use of ADPswID and AD parameters.

Recommendations For versions 2.4 and 2.5, consider restricting access to privileged functions until a fix is available. As a temporary workaround, ensure that all XML requests properly utilize the ADPswID and AD parameters to prevent bypassing two-factor authentication.