CVE Catalog
CVE-2016-6603
CriticalSummary
ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header.
Risk Assessment
Attackers can gain access to the system as another user, potentially leading to unauthorized access to data and functions.
Recommendation
It is recommended to update to the latest version of ZOHO WebNMS framework and implement additional security measures to protect against such attacks.
Original NVD description (English source)
ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header.