The /ui/login endpoint accepted a POST request with username=admin and an empty password, which resulted in a successful login. This indicated improper authentication validation or a default/admin account misconfiguration.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view