• info
• discussion
• exploit
• solution
• references

WebGUI Secondary Admin Security Bypass Vulnerability

WebGUI is prone to a security-bypass vulnerability because the application fails to properly validate user privileges.

An unprivileged attacker with valid user credentials may exploit this issue to create administration accounts and perform certain actions with elevated privileges.

Versions prior to WebGUI 7.4.18 are vulnerable to this issue.