Remote File Overwrite Vulnerability in NetGain Systems Enterprise Manager

CVE-2017-16605

What is CVE-2017-16605?

This vulnerability enables remote attackers to overwrite arbitrary files on installations of NetGain Systems Enterprise Manager version 7.2.730 build 1034. Even though authentication is required, the flaw exists in the authentication mechanism, which can be circumvented. Specifically, the vulnerability is found in the org.apache.jsp.u.jsp.db.save_005fattrs_jsp servlet, operating on TCP port 8081 by default. The issue arises when processing the id parameter, where the application fails to adequately validate user input for file operations. As a result, attackers can exploit this vulnerability to overwrite files accessible to administrative accounts, posing significant security risks.

References