Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2015-8368
HistoryDec 17, 2015 - 7:59 p.m.

CVE-2015-8368

2015-12-1719:59:10
Debian Security Bug Tracker
security-tracker.debian.org
8

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.041 Low

EPSS

Percentile

92.2%

ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/password_reset.lua.

OSVersionArchitecturePackageVersionFilename
Debian999allntopng< 2.2+dfsg1-1ntopng_2.2+dfsg1-1_all.deb
Debian13allntopng< 2.2+dfsg1-1ntopng_2.2+dfsg1-1_all.deb

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.041 Low

EPSS

Percentile

92.2%