writeups.xyz / Exploiting Hardcoded Keys to achieve RCE in Yellowfin BI

Submitter : c2a

Date: 24 January 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Authentication Bypass
• Security Code Review
• JWT

Programs :

• Yellowfin BI

Authors :

• Maxwell Garrett (@TheGrandPew)
• Shubham Shah (@Infosec_au)

Link :
https://blog.assetnote.io/2023/01/24/yellowfin-auth-bypass-to-rce/