Product
OpsTree REMS through version 1.0.0 contains an authentication bypass vulnerability allowing unauthenticated attackers to obtain valid JWTs and gain administrative access via parameter manipulation.