A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.
Contact SUNNET Technology for version updates.
Cheng Ming Yang (TW1943) of ZUSO ART