Lucene search
+L

Ipswitch WhatsUp Professional 2006 - Authentication Bypass

🗓️ 17 May 2006 00:00:00Reported by Kenneth F. BelvaType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 26 Views

Ipswitch WhatsUp Professional 2006 Authentication Bypass Vulnerabilit

Related
Code
ReporterTitlePublishedViews
Family
CVE
CVE-2006-2531
22 May 200623:00
cve
Cvelist
CVE-2006-2531
22 May 200623:00
cvelist
EUVD
EUVD-2006-2531
7 Oct 202500:30
euvd
Tenable Nessus
Ipswitch WhatsUp Professional Crafted Header Authentication Bypass
18 May 200600:00
nessus
NVD
CVE-2006-2531
22 May 200623:10
nvd
OpenVAS
Ipswitch WhatsUp Professional Authentication bypass detection
24 Oct 200800:00
openvas
OpenVAS
Ipswitch WhatsUp Professional Authentication bypass detection
24 Oct 200800:00
openvas
Prion
Authentication flaw
22 May 200623:10
prion
source: https://www.securityfocus.com/bid/18019/info

Ipswitch WhatsUp Professional 2006 is susceptible to a remote authentication-bypass vulnerability.

This issue allows remote attackers to gain administrative access to the web-based administrative interface of the application. This will aid them in further network attacks.

The HTTP requests containing the following header information are sufficient to demonstrate this issue:

User-Agent: Ipswitch/1.0
User-Application: NmConsole

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation