WALLIX Access Manager 3.x up to and including 4.0.x allows a remote malicious user to access sensitive information.
wallix bastion access manager