CVE-2020-8592

概要

参考情報

• pyaefromucsp.blogspot.com/2020/02/eg-manager-v712-sql-injection-lead-to_56.html · Exploit

eg manager のその他の脆弱性

• CVE-2022-29594高 7.8eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.
• CVE-2020-8591緊急 9.8eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request.