Lucene search
K

5 matches found

NVD
NVD
added 2015/12/17 7:59 p.m.17 views

CVE-2015-8368

ntopng aka ntop before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/passwordreset.lua...

6CVSS6.3AI score0.05099EPSS
Exploits5References3
OSV
OSV
added 2015/12/17 7:59 p.m.7 views

CVE-2015-8368

ntopng aka ntop before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/passwordreset.lua...

6CVSS6.3AI score0.05099EPSS
Exploits5References4
OSV
OSV
added 2015/12/17 7:59 p.m.4 views

UBUNTU-CVE-2015-8368

ntopng aka ntop before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/passwordreset.lua...

6CVSS5.8AI score0.05099EPSS
Exploits5References3
CVE
CVE
added 2015/12/17 7:0 p.m.54 views

CVE-2015-8368

Summary: CVE-2015-8368 affects ntopng (ntop) up to version 2.1.x, where remote authenticated users can escalate privileges by tampering with the login flow. The underlying issue allows changing the login context via the user cookie and the username parameter sent to admin/password_reset.lua, effe...

6CVSS6.4AI score0.05099EPSS
Exploits5References3Affected Software1
Packet Storm
Packet Storm
added 2015/12/02 12:0 a.m.35 views

ntop-ng 2.0.15102 Privilege Escalation

Vulnerability title: ntop-ng = 2.0.151021 - Privilege Escalation Author: Dolev Farhi Contact: dolev at flaresec.com Vulnerable version: 2.0.151021 Fixed version: 2.2 Link: ntop.org Date 27.11.2015 CVE-2015-8368 Product Details: ntopng is the next generation version of the original ntop, a network...

6CVSS0.9AI score0.05099EPSS
Exploits5
Rows per page
Query Builder