CVE-2014-9610

Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and remove IP addresses from the quarantine via the ip parameter to webadmin/user/quarantine_disable.php.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:netsweeper:netsweeper:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:netsweeper:netsweeper:4.0.4:*:*:*:*:*:*:*
cpe:2.3:a:netsweeper:netsweeper:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:netsweeper:netsweeper:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:netsweeper:netsweeper:*:*:*:*:*:*:*:*
cpe:2.3:a:netsweeper:netsweeper:4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:netsweeper:netsweeper:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:netsweeper:netsweeper:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:netsweeper:netsweeper:4.0.8:*:*:*:*:*:*:*
cpe:2.3:a:netsweeper:netsweeper:4.0.7:*:*:*:*:*:*:*
cpe:2.3:a:netsweeper:netsweeper:4.0.6:*:*:*:*:*:*:*
cpe:2.3:a:netsweeper:netsweeper:4.0.5:*:*:*:*:*:*:*

Information

Published : 2017-09-19 08:29

Updated : 2017-09-27 12:49


NVD link : CVE-2014-9610

Mitre link : CVE-2014-9610


JSON object : View

CWE
CWE-264

Permissions, Privileges, and Access Controls

Advertisement

dedicated server usa

Products Affected

netsweeper

  • netsweeper