CVE-2021-42338

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.

La página de inicio de sesión de 4MOSAn GCB Doctor presenta una comprobación inapropiada de la cookie, que permite a un atacante remoto no autenticado omitir la autenticación mediante una inyección de código en la cookie, y manipular arbitrariamente el sistema o interrumpir los servicios mediante la carga y ejecución de archivos arbitrarios