Lucene search

CVE-2017-16594

🗓️ 23 Jan 2018 01:00:00Reported by zdiType

This vulnerability in NetGain Systems Enterprise Manager 7.2.730 build 1034 allows remote attackers to create arbitrary files by bypassing authentication and exploiting a flaw in the org.apache.jsp.u.jsp.db.save_005fimage_jsp servlet

Reporter	Title	Published	Views	Family All 4
Prion	Design/Logic Flaw	23 Jan 201801:29	–	prion
CVE	CVE-2017-16594	23 Jan 201801:29	–	cve
Zero Day Initiative	NetGain Systems Enterprise Manager db.save_005fimage_jsp id Unrestricted File Upload Remote Code Execution Vulnerability	13 Dec 201700:00	–	zdi
NVD	CVE-2017-16594	23 Jan 201801:29	–	nvd

[
  {
    "product": "NetGain Systems Enterprise Manager",
    "vendor": "NetGain Systems",
    "versions": [
      {
        "status": "affected",
        "version": "7.2.730 build 1034"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-17-959

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Jan 2018 01:00Current

6.9Medium risk

Vulners AI Score6.9

EPSS0.002

CWE-434