WellChoose Single Sign-On Portal System OS Command Injection Vulnerability

A command injection vulnerability has been identified in the Single Sign-On Portal System developed by WellChoose, affecting versions prior to IFTOP_P4_181. This vulnerability allows authenticated remote attackers to inject and execute arbitrary operating system commands on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of operating system commands on the server, potentially allowing attackers to manipulate the system or access sensitive information.

Remediation

Users are advised to update the Single Sign-On Portal System to version IFTOP_P4_181 or later.