CVE-2008-6701

NetScout Visualizer V2100 and InfiniStream i1730 expose a direct access path to ResourceManager/en_US/domains/add_domain.jsp, allowing remote attackers to obtain administrator privileges. The issue arises from lack of access restriction on this resource, enabling privilege escalation via a direct...

netscout-admin.txt

Network General Enterprise Administrator Network General has been aquired by Net Scout: Non-privileged users can perform privileged functions by manipulating the URL. Can log on as user and using the following URL conduct administrative functions:...