CVE-2020-17388

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Tomcat...

CVE-2020-17388

The CVE-2020-17388 issue affects Marvell QConvergeConsole 5.5.0.64. The root cause is a misconfigured Tomcat admin console without proper access restrictions, allowing an attacker to bypass authentication and execute code with SYSTEM privileges. Multiple sources (ZDI-20-975 and Red Hat/CVE aggreg...