2100 Technology Official Document Management System Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the Official Document Management System developed by 2100 Technology. This vulnerability allows unauthenticated remote attackers to bypass authentication mechanisms and obtain connection tokens of logged-in users. Attackers can use these tokens to access the system as if they were the authenticated users. The vulnerability affects versions of the software prior to 5.0.89.2.

Impact

Exploitation of this vulnerability allows for unauthorized access to the system, using the identity of a logged-in user.

Remediation

Users are advised to update the Official Document Management System to version 5.0.90 or later.