CVE-2018-19411

2022-10-0316:21:55

mitre

www.cve.org

cve-2018-19411

user rights check

authentication bypass

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an HTTP request because /api/addusers doesn’t check, or doesn’t properly check, user rights.