Authentication Bypass Vulnerability in NetGain Systems Enterprise Manager

CVE-2017-16590

What is CVE-2017-16590?

This vulnerability enables remote attackers to bypass authentication measures in vulnerable versions of NetGain Systems Enterprise Manager. Specifically, it originates from an inadequate string matching mechanism within the MainFilter servlet's doFilter method. While user interaction is required for exploitation, a determined attacker can utilize this flaw to execute arbitrary code with Administrator privileges by combining it with other vulnerabilities.

References