CVE-2024-22186 Information

Description

The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator.

Reference

https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02