Design/Logic Flaw

NetScout formerly Network General Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/enUS/domains/adddomain.jsp, which allows remote attackers to gain administrator privileges via a direct request...

CVE-2008-6701

NetScout formerly Network General Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/enUS/domains/adddomain.jsp, which allows remote attackers to gain administrator privileges via a direct request...

CVE-2008-6701

NetScout Visualizer V2100 and InfiniStream i1730 expose a direct access path to ResourceManager/en_US/domains/add_domain.jsp, allowing remote attackers to obtain administrator privileges. The issue arises from lack of access restriction on this resource, enabling privilege escalation via a direct...

netscout-admin.txt

Network General Enterprise Administrator Network General has been aquired by Net Scout: Non-privileged users can perform privileged functions by manipulating the URL. Can log on as user and using the following URL conduct administrative functions:...