CVE:CVE-2020-8591
CNNVD:CNNVD-202002-028
eG Innovations eG Manager 7.1.2版本中存在授权问题漏洞。攻击者可借助com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r URL利用该漏洞绕过身份验证。
solution:Upgrade eginnovations eg_manager to a higher version than 7.1.2,and avoid the version 7.1.2