high8.8
CVE-2024-9970
The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability.
Impact
The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Newtype | Flowmaster Bpm Plus | before 5.3.1 |