Lucene search
HistoryApr 10, 2009 - 10:00 p.m.
CVE-2008-6701
cve-2008-6701
netscout
visualizer v2100
infinistream i1730
access restriction
remote attackers
admin privileges
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.0%
NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator privileges via a direct request.
Affected configurations
Node
netscoutngenius_infinistreamMatchi1730
ORnetscoutvisualizerMatchv2100
Related
prion
prion
Design/Logic Flaw
2009-04-10 22:00:00
cvelist
cvelist
CVE-2008-6701
2009-04-10 15:00:00
nvd
nvd
CVE-2008-6701
2009-04-10 22:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.0%
Related for CVE-2008-6701