EUVD-2018-11333

Malware in sbrugna...

CVE-2018-19648

The CVE-2018-19648 entry concerns ADTRAN PMAA versions 1.6.2-1, 1.6.3, and 1.6.4. The root cause is a flaw in NETCONF Access Management (NACM) that lets unprivileged users create privileged accounts and run arbitrary commands through the diagnostic-profile over RESTCONF. Impact, per the sources, ...

PT-2019-9888

Name of the Vulnerable Software and Affected Versions ADTRAN PMAA versions 1.6.2-1 through 1.6.4 Description An issue was discovered that allows unprivileged users to create privileged users and execute arbitrary commands. This is achieved through the use of the diagnostic-profile over RESTCONF,...

CVE-2018-19648: Improper Privilege Management

An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4. NETCONF Access Management NACM allows unprivileged users to create privileged users and execute arbitrary commands via the use of the diagnostic-profile over RESTCONF...