Vendor
A missing authentication vulnerability in the jt808-server Web Management API allows remote attackers to bypass security controls via the WebMvcConfig.addInterceptors function.