Remote File Deletion Vulnerability in NetGain Systems Enterprise Manager

CVE-2017-16599

What is CVE-2017-16599?

This security flaw in NetGain Systems Enterprise Manager allows remote attackers to delete files from vulnerable installations by exploiting improper validation within a specific servlet. Although authentication is required, attackers can bypass the mechanism, enabling them to manipulate file operations. This vulnerability can be orchestrated in combination with other threats to execute code within an Administrator's context, posing significant risks to the system's integrity.

References