CyberRota Analysis
AI-GeneratedAntFlow V2.0.0 is susceptible to incorrect access control due to its reliance on user IDs from request headers for identity verification. This vulnerability allows attackers to forge user credentials, potentially leading to unauthorized access and sensitive information leakage. Organizations utilizing this version of AntFlow should prioritize remediation to safeguard against potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
AntFlow V2.0.0 is vulnerable to Incorrect Access Control. JiMuMDCCommonsRequestLoggingFilter.java retrieves the userid from the request header as the core of the identity verification mechanism, allowing attackers to forge any user identity credential information, thereby causing sensitive information leakage.