PT-2020-20225

Name of the Vulnerable Software and Affected Versions eG Manager version 7.1.2 Description The issue allows authentication bypass. This can be achieved via a request to the com.egurkha.EgLoginServlet endpoint with specific parameters, including uname, upass, and accessKey. For example, a request...

CVE-2020-8591: Improper Authentication

eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request...