CVE-2023-6578 – Software AG WebMethods access control

https://notcve.org/view.php?id=CVE-2023-6578

A vulnerability classified as critical has been found in Software AG WebMethods 10.11.x/10.15.x. Affected is an unknown function of the file wm.server/connect/. The manipulation leads to improper access controls. It is possible to launch the attack remotely. To access a file like /assets/ a popup may request username and password. • https://vuldb.com/?ctiid.247158 https://vuldb.com/?id.247158 • CWE-284: Improper Access Control •