SiPass integrated access control vulnerability (CNVD-2021-100377)

SiPass integrated is an access control system. siPass integrated access control vulnerability, the affected application has insufficient restrictions on access to internal user authentication services. A remote attacker could exploit the vulnerability to trigger multiple operational accounts on behalf of valid users.