Description
Kentico CMS is an ASP.NET web content management system.
The Kentico installation wizard is found in the web application. An attacker can install a new site and get Global Administrator access.
Remediation
Restrict access to the installation wizard
References
Related Vulnerabilities
Drupal Core 8.x.x Multiple Security Bypass Vulnerabilities (8.0.0 - 8.8.12)
WordPress Plugin Ultimeter Security Bypass (1.9.2)
WordPress Plugin Social Sharing-Kiwi Security Bypass (2.0.10)
Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.8)
WordPress Plugin ImportWP-Import any XML or CSV File into WordPress Security Bypass (1.1.5)