CVE-2020-8591

eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin==eGm0n1t0r request...

CVE-2020-8591

CVE-2020-8591 affects eG Manager 7.1.2, where an authentication bypass is possible via the login endpoint com.egurkha.EgLoginServlet with parameters like uname=admin, upass=, accessKey=... This indicates a failure in access control for login handling that could grant unauthenticated access. Multi...