CVE-2025-29996 — Authentication Bypass Vulnerability in CAP back office application
This vulnerability exists in the CAP back office application due to improper implementation of OTP verification mechanism in its API based login. A remote attacker with valid cr…
Published: 2025-03-13 · CVSS: 8.2 · CVSS 4.0
This vulnerability exists in the CAP back office application due to improper implementation of OTP verification mechanism in its API based login. A remote attacker with valid credentials could exploit this vulnerability by manipulating API request URL/payload. Successful exploitation of this vulnerability could allow the attacker to bypass Two-Factor Authentication (2FA) for other user accounts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7