Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button, and it will redirect you to /home.jsp without any authentication.CreditsDudu Moyal, Gad Abuhatziera, Moriel Harush, Alon Zuker - Sophtix Security LTDReferenceshttps://www.gov.il/en/departments/faq/cve_advisories