7.5
High
CVE-2024-29011 Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability
Description
Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability. This issue affects GMS: 9.3.4 and earlier versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GMS | Versions not published | |
| global_management_system 9.3 | earliest → 9.3.4 | No fix stated |
Other CVEs of GMS
The 24 CVEs of GMS →
CVE-2026-18634
An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1…
8.4
High
CVE-2026-66154
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1…
8.3
High
CVE-2026-66148
An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build…
6.3
Medium
CVE-2026-66147
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier…
9.4
Critical