An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request.