CVE-2016-6602

The document describes multiple vulnerabilities in WebNMS Framework Server 5.2 and 5.2 SP1, including directory traversal leading to RCE, file download via traversal, weak password obfuscation, and user impersonation. CVE-2016-6603 specifically covers user account impersonation via the 'UserName' HTTP header.

This Metasploit module exploits two vulnerabilities in WebNMS Framework Server 5.2: an unauthenticated file download via the FetchFile servlet to retrieve 'conf/securitydbData.xml', and a weak obfuscation algorithm to reverse-engineer plaintext credentials. It extracts and displays usernames and passwords.