CVE-2022-39038: FLOWRING Agentflow BPM - Broken Access Control
Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user account to acquire arbitrary account privilege, and access, manipulate system or disrupt service.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2022-39038?
CVE-2022-39038 is rated as having a high severity due to its potential for unauthorized privilege escalation.
How do I fix CVE-2022-39038?
To fix CVE-2022-39038, you should update the Agentflow BPM system to the latest version that addresses this authentication vulnerability.
What type of vulnerability is CVE-2022-39038?
CVE-2022-39038 is classified as an improper authentication vulnerability.
Who is affected by CVE-2022-39038?
CVE-2022-39038 affects users of Agentflow BPM version 4.0.0.1183.552.
What can an attacker do with CVE-2022-39038?
An attacker exploiting CVE-2022-39038 can change user account names to gain arbitrary privileges and potentially manipulate the system.