Authentication Bypass in Genua Genugate by Genua

CVE-2021-27215

What is CVE-2021-27215?

An authentication bypass vulnerability was identified in multiple versions of Genua Genugate, allowing attackers to bypass login mechanisms on the Web Interfaces, including Admin and Userweb panels. A flaw in the login process permits the system to incorrectly validate login data under specific manipulation scenarios. As a result, attackers may gain unauthorized access to the admin panel, potentially allowing them to log in as any user, including those with elevated privileges such as the root user or even non-existent accounts.

References