CVE-2014-9618 The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a...
CriticalCVSS 9.8
EPSS 72.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netsweeper | <= 3.1.9 | No fix listed |
| netsweeper | = 4.0.0 | No fix listed |
| netsweeper | = 4.0.1 | No fix listed |
| netsweeper | = 4.0.2 | No fix listed |
| netsweeper | = 4.0.3 | No fix listed |
| netsweeper | = 4.0.4 | No fix listed |
| netsweeper | = 4.0.5 | No fix listed |
| netsweeper | = 4.0.6 | No fix listed |
| netsweeper | = 4.0.7 | No fix listed |
| netsweeper | = 4.0.8 | No fix listed |
| netsweeper | = 4.1.0 | No fix listed |
| netsweeper | = 4.1.1 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 37933 exploit third-party-advisory vdb-entry