CVE-2015-6237

The RPC service in Tripwire formerly nCircle IP360 VnE Manager 7.2.2 before 7.2.6 allows remote attackers to bypass authentication and 1 enumerate users, 2 reset passwords, or 3 manipulate IP filter restrictions via crafted "privileged commands."...

CVE-2015-6237

CVE-2015-6237 affects Tripwire IP360 VnE Manager, versions 7.2.2 through 7.2.5. The RPC service exposes a remote XML-RPC API that bypasses authentication, enabling an unauthenticated attacker to enumerate users, reset passwords, and manipulate IP filter restrictions via crafted privileged command...

CVE-2015-6237

The RPC service in Tripwire formerly nCircle IP360 VnE Manager 7.2.2 before 7.2.6 allows remote attackers to bypass authentication and 1 enumerate users, 2 reset passwords, or 3 manipulate IP filter restrictions via crafted "privileged commands."...