Videx CyberAudit-Web Authentication Bypass Vulnerability

A logic flaw in Videx's CyberAudit-Web prior to version 9.8.11 has been identified, allowing authentication bypass. This vulnerability enables an attacker to create a valid session without credentials. Videx has released a patch for this vulnerability, available to all CyberAudit-Web instances, including those that are End of Maintenance. Users needing assistance with the patch can contact Videx support.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling unauthorized access to the application and its functionalities.

Remediation

Users are advised to update to the patched version of CyberAudit-Web. The patch has been made available to all instances, including those that are End of Maintenance.