Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
2100 Technology Electronic Official Document Management System - Authentication Bypass
Vulnerability Description
The Electronic Official Document Management System from 2100 Technology has an Authentication Bypass vulnerability. Although the product enforces an IP whitelist for the API used to query user tokens, unauthenticated remote attackers can still deceive the server to obtain tokens of arbitrary users, which can then be used to log into the system.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
使用欺骗进行的认证绕过
Vulnerability Title
2100 TECHNOLOGY Electronic Official Document Management System 安全漏洞
Vulnerability Description
2100 TECHNOLOGY Electronic Official Document Management System是中国二一零零科技（2100 TECHNOLOGY）公司的一个电子办公文档管理系统。 2100 TECHNOLOGY Electronic Official Document Management System 5.0.86.9之前版本存在安全漏洞，该漏洞源于存在认证绕过漏洞，导致未认证的远程攻击者可欺骗服务器获取任意用户令牌并登录系统。
CVSS Information
N/A
Vulnerability Type
N/A