Lucene search
PRIOn knowledge basePRION:CVE-2006-2531HistoryMay 22, 2006 - 11:10 p.m.
Authentication flaw
2006-05-2223:10:00
PRIOn knowledge base
www.prio-n.com
3
Ipswitch WhatsUp Professional 2006 only verifies the user’s identity via HTTP headers, which allows remote attackers to spoof being a trusted console and bypass authentication by setting HTTP User-Agent header to “Ipswitch/1.0” and the User-Application header to “NmConsole”.
| CPE | Name | Operator | Version |
|---|---|---|---|
| whatsup | eq | professional-2006 |
Related
openvas
openvas
Ipswitch WhatsUp Professional Authentication bypass detection
2008-10-24 00:00:00
Ipswitch WhatsUp Professional Authentication bypass detection
2008-10-24 00:00:00
nessus
nessus
Ipswitch WhatsUp Professional Crafted Header Authentication Bypass
2006-05-18 00:00:00
cve
cve
CVE-2006-2531
2006-05-22 23:10:00
nvd
nvd
CVE-2006-2531
2006-05-22 23:10:00
cvelist
cvelist
CVE-2006-2531
2006-05-22 23:00:00