3 matches found
CVE-2020-8591
eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin==eGm0n1t0r request...
9.8CVSS7.2AI score0.01438EPSS
SaveExploits1References1
CVE-2020-8591
eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request...
9.8CVSS8.6AI score0.01438EPSS
SaveExploits1References2
CVE-2020-8591
CVE-2020-8591 affects eG Manager 7.1.2, where an authentication bypass is possible via the login endpoint com.egurkha.EgLoginServlet with parameters like uname=admin, upass=, accessKey=... This indicates a failure in access control for login handling that could grant unauthenticated access. Multi...
9.8CVSS9.4AI score0.01438EPSS
SaveExploits1References1Affected Software1
20