Vulnerabilities

TI-2022-12030 CVE-2022-29594 · GHSA-mf45-vhg9-3c42

eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.

LOW 34

eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00304 Published 2022-06-02 No fix listed CWE-281

TI-2020-06888 CVE-2020-8591 · GHSA-pfhj-vj8p-hpvv

MEDIUM 45

eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01438 Published 2020-02-03 No fix listed CWE-287

TI-2020-06889 CVE-2020-8592 · GHSA-hj68-m8g6-47mg

MEDIUM 45

eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka the Forgot Password feature).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.014 Published 2020-02-03 No fix listed CWE-89