Security Advisory
CVE-2022-29596
9.8
CRITICAL
Vulnerability Description
MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../windows/win.ini%00.jpg&Pwd=_any_password_&ConnMode=1&3054=Login substring for directory traversal.
Published Date
May 11, 2022
Official Source
NIST NVD Advisory