CVE-2014-9611: Critical severity Netsweeper Netsweeper vulnerability
Published Sep 19, 2017
·Updated
Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmin/nslam/index.php.
Affected Software
1 affected component
Netsweeper Netsweeper<=4.0.4
Event History
Sep 19, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9611?
CVE-2014-9611 is considered a critical vulnerability as it allows remote attackers to bypass authentication.
2
How do I fix CVE-2014-9611?
To fix CVE-2014-9611, upgrade to Netsweeper version 4.0.5 or later.
3
What type of attacks can be carried out due to CVE-2014-9611?
Due to CVE-2014-9611, attackers can create arbitrary accounts and policies without authentication.
4
Which versions of Netsweeper are affected by CVE-2014-9611?
Netsweeper versions prior to 4.0.5 are affected by CVE-2014-9611.
5
Is there a known exploit for CVE-2014-9611?
Yes, there are known exploits that demonstrate the impact of CVE-2014-9611.