Netsweeper - Authentication Bypass

The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL. id: CVE-2014-9618 info: name: Netsweeper - Authentication...

CVE-2014-9618

The CVE-2014-9618 vulnerability affects Netsweeper’s Client Filter Admin portal (versions before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2). It allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL. Public sou...

Netsweeper 4.0.8 - Authentication Bypass (via New Profile Creation)

Netsweeper 4.0.8 - Authentication Bypass via New Profile Creation +-----------------------------------------------------------------+ + Netsweeper 4.0.8 - Authentication Bypass New Profile Creation + +-----------------------------------------------------------------+ Affected Product: Netsweeper...

Netsweeper 4.0.8 - Authentication Bypass (via New Profile Creation)

+-----------------------------------------------------------------+ + Netsweeper 4.0.8 - Authentication Bypass New Profile Creation + +-----------------------------------------------------------------+ Affected Product: Netsweeper Vendor Homepage : www.netsweeper.com Version : 4.0.8 and probably...