critical9.8
CVE-2022-29596
MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../wi…
Impact
MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../windows/win.ini%00.jpg&Pwd=_any_password_&ConnMode=1&3054=Login substring for directory traversal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microstrategy | Enterprise Manager | Version 2022 |