Description
NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat (aka CLERK) users to gain privileges by creating a SYSTEM_ADMIN account.
References
- JVN#00460236 third-party-advisory
- http://www.netcommons.org/muer4mz6s-6669
- JVNDB-2016-000075 third-party-advisory