CVE-2014-9618
CRITICAL NUCLEINetsweeper <3.1.10, <4.0.9, <4.1.2 - Auth Bypass
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-9618. PoCs published by Anastasios Monachos. A Nuclei detection template is also available.
AI-analyzed exploit summary This is a writeup describing an authentication bypass vulnerability in Netsweeper 4.0.8. The exploit involves manipulating the 'action' parameter to bypass authentication and create a new profile without credentials.
Description
The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.
Exploits (1)
This is a writeup describing an authentication bypass vulnerability in Netsweeper 4.0.8. The exploit involves manipulating the 'action' parameter to bypass authentication and create a new profile without credentials.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H