e-Excellence U-Office Force Improper Authentication Vulnerability Allowing Administrator Login

A vulnerability allowing improper authentication has been identified in e-Excellence U-Office Force versions prior to 28.0. This vulnerability enables unauthenticated remote attackers to manipulate cookies and use a specific API to log in as an administrator.

Impact

Exploitation of this vulnerability allows for unauthorized access to the administrative account, potentially leading to further actions within the application that require administrative privileges.

Remediation

Users are advised to update to U-Office Force version 28.0 or later.