a+HRD Authentication Abuse Vulnerability Allowing Elevated Privileges

An authentication abuse vulnerability has been identified in a+HRD versions through 7.5, developed by aEnrich. This vulnerability allows unauthenticated remote attackers to send crafted packets that obtain administrator access tokens. These tokens can then be used to access the system with elevated privileges.

Impact

Exploitation of this vulnerability allows for unauthorized access to the system with administrative rights, potentially leading to further actions or changes within the system that could be harmful or disruptive.

Remediation

Users are advised to upgrade to version 6.8 or later and install the latest patches. For assistance, contact aEnrich customer service.