Sparx Enterprise Architect vulnerabilities

Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An authenticated attacker can modify the Enterprise Architect client behavior and log in as any other user or administrator, allowing for any changes to the repository.

A vulnerability in Sparx Enterprise Architect involves insufficiently protected credentials. The client reveals the plaintext OAuth2 client secret, decoding it and using it to exchange for access and ID tokens as part of the OpenID authentication flow.

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication.