Flowring Agentflow Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in Agentflow, a product developed by Flowring. This vulnerability allows unauthenticated remote attackers to exploit a specific functionality to obtain arbitrary user authentication tokens, enabling them to log into the system as any user. The issue is present in all versions of Agentflow.

Impact

Exploitation of this vulnerability allows for unauthorized access to the system, with the attacker able to log in as any user.

Remediation

To mitigate this vulnerability, it is recommended to restrict access to the AgentflowWeb.jws file by configuring the RemoteAddrFilter in the web.xml file. This can be done by specifying which IP addresses are allowed to connect to the web service. For issues that have already caused operational problems, contact Flowring's customer service.