CVE-2018-19410

PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges including administrator. A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local...

CVE-2018-19411

PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account including administrator via an HTTP request because /api/addusers doesn't check, or doesn't properly check, user rights...

CVE-2018-19411: Improper Privilege Management

PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account including administrator via an HTTP request because /api/addusers doesn't check, or doesn't properly check, user rights...

PT-2018-1931

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor versions prior to 18.2.40.1683 Description The issue is related to insecure privilege management in PRTG Network Monitor, allowing remote unauthenticated attackers to create users with read-write privileges, including...

PT-2018-1930

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor versions prior to 18.2.40.1683 Description The issue is related to insecure privilege management, allowing an authenticated user with read-only privileges to create another user with read-write privileges, including...