A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packets containing requests to perform arbitrary actions.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Server | 4d | 17 (including) | 17 (including) |
| Server | 4d | 18 (including) | 18 (including) |
| Server | 4d | 18-r5 (including) | 18-r5 (including) |
| Server | 4d | 19 (including) | 19 (including) |
| Server | 4d | 19-r7 (including) | 19-r7 (including) |