cve/2022/CVE-2022-29596.md

### [CVE-2022-29596](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29596)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../windows/win.ini%00.jpg&Pwd=_any_password_&ConnMode=1&3054=Login substring for directory traversal.

### POC

#### Reference
- https://github.com/haxpunk1337/Microstrategy-Poc/blob/main/poc

#### Github
No PoCs found on GitHub currently.