Critical severity · published Jan 23, 2017
CVE-2016-6603
ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header
9.8
CVSS
86.9%
EPSS
No
On KEV
Description
ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)86.9% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WF
Webnms Framework · Zohocorp
5.2; 5.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-6603
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-6603
Exploit
http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html
Exploit
http://seclists.org/fulldisclosure/2016/Aug/54
www.securityfocus.com
http://www.securityfocus.com/archive/1/539159/100/0/threaded
Third Party Advisory
http://www.securityfocus.com/bid/92402
Exploit
https://blogs.securiteam.com/index.php/archives/2712
forums.webnms.com
https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them
More from Webnms Framework
9.8
CVE-2016-6602
ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtain cleartext passwords by leveraging…
9.8
CVE-2016-6600
Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a…
7.5
CVE-2016-6601
Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to read arbitrary files via a