CVE ID | CVE-2017-16592 |
CVSS SCORE | 7.8, AV:N/AC:L/Au:N/C:C/I:N/A:N |
AFFECTED VENDORS |
NetGain Systems |
AFFECTED PRODUCTS |
Enterprise Manager |
VULNERABILITY DETAILS |
The specific flaw exists within the org.apache.jsp.u.jsp.restore.download_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of Administrator. |
ADDITIONAL DETAILS |
|
DISCLOSURE TIMELINE |
|
CREDIT | rgod |