CVE-2014-4198

A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that neglects the use of ADPswID and AD parameters, which could let a malicious user access privileged function.

Score

CVSS 3.1 9.1 Critical

Status

Modified - cve@mitre.org

Published

2020-02-13

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Rbs Bs-client. Retail Client (Bssys)

References

• https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt