CyberRota Analysis
AI-GeneratedA vulnerability in AhsayCBS versions up to 10.3.2 allows for improper authentication through manipulation of the 'random' argument in the checkSysPwd function, potentially enabling remote exploitation. Organizations using affected versions of AhsayCBS should prioritize upgrading to version 10.3.4 to mitigate this high-severity risk, as the exploit is now publicly available. Immediate action is essential to protect sensitive data and maintain system integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 10.3.4 is able to mitigate this issue. It is recommended to upgrade the affected component.