CVE-2016-4813

NetCommons 2.4.2.1 and earlier are affected by a privilege-escalation flaw where a remote authenticated secretariat user (CLERK) can create a SYSTEM_ADMIN account, granting full admin rights. The root cause is elevation of privileges within the NetCommons privilege model, enabling CLERK to gain a...