Uniong WebITR Authentication Bypass Vulnerability Allowing User Impersonation

An authentication bypass vulnerability has been identified in Uniong's WebITR application, specifically in versions through 2_1_0_33. This vulnerability allows authenticated remote attackers to log into the system as any user by modifying a specific parameter. To exploit this issue, attackers must first obtain a user ID.

Impact

Exploitation of this vulnerability allows for unauthorized access to user accounts, potentially leading to misuse of user privileges and access to sensitive information.

Remediation

Users are advised to update WebITR to version 2_1_0_34 or later.