← CVE Intelligence

CVE-2022-39042

aEnrich a+HRD - Improper Authentication PUBLISHED

Description (CNA)

aEnrich a+HRD has improper validation for login function. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access API function to perform arbitrary system command or disrupt service.

Affected (CNA)

Vendor / productVersions
aEnrich / a+HRDaffected 6.8 through 7.0

CWE

CWE-287

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.