Unrated severityNVD Advisory· Published May 11, 2022· Updated Aug 3, 2024

CVE-2022-29596

Description

MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../windows/win.ini%00.jpg&Pwd=_any_password_&ConnMode=1&3054=Login substring for directory traversal.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MicroStrategy/Enterprise Managerdescription
Oracle Corporation/Enterprise Managerllm-fuzzy
Range: 2022

Patches

Vulnerability mechanics

References

github.com/haxpunk1337/Microstrategy-Poc/blob/main/pocmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000