AMSS++ Authentication Bypass Vulnerability Allowing Unauthorized Administrative Access

A vulnerability in AMSS++ version 4.7 allows for authentication bypass, enabling attackers to access administrative accounts using hardcoded credentials. The default admin username and password '1234' can be used to gain unauthorized administrative access to the system.

Impact

Exploitation of this vulnerability allows for unauthorized administrative access to the AMSS++ application.

Reproduction

To reproduce this vulnerability, log into the AMSS++ application using the default admin username and the password '1234'. This will grant unauthorized administrative access.