Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.
Denotes Vulnerable Software Are we missing a CPE here? Please let us know .
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
