This vulnerability in GreaterWMS (<=2.1.49) involves an authentication bypass through the /staff route, enabling remote unauthenticated attackers to disclose credentials and escalate privileges. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality and integrity. No official patch or remediation level is currently provided, and no known exploits are reported in the wild.

Successful exploitation allows attackers to bypass authentication controls and gain unauthorized access to sensitive credentials and elevated privileges within the GreaterWMS system. This compromises confidentiality and integrity of the system but does not affect availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the /staff route and monitor for unauthorized access attempts. Avoid exposing the affected versions to untrusted networks.