Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:wimoor:wimoor:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Authentication Bypass in WIMOOR via Unsigned X-USERINFO Header

WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows unauthorized tenants to escalate privileges and access sensitive financial data by forging the unsigned X-USERINFO header.

WIMOOR authentication-bypass web-application cloud
1t 1c