Venki Supravizio BPM NTLM Hash Leak Vulnerability Allowing Privilege Escalation

A vulnerability in Venki Supravizio BPM versions through 18.0.1 allows authenticated attackers with Application Administrator access to leak NTLM hashes, potentially leading to privilege escalation on the underlying host system.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation on the host system.