CVE-2016-6603 in WebNMS Framework

Summary

ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 08/04/2016
• Disclosure: 01/23/2017
• Moderation: VulDB entry created
• Entries: VDB-95851 (1)
• CPE: ready
• CWE: CWE-20 (Confirmed)
• Exploit: Download
• CVSS: 8.5
• EPSS: 0.70316
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-6603
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-6603
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-6603/