CVE-2014-9618: Critical severity Netsweeper Netsweeper vulnerability
The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9618?
CVE-2014-9618 has been classified as a medium severity vulnerability due to its ability to allow remote attackers to bypass authentication.
How do I fix CVE-2014-9618?
To fix CVE-2014-9618, upgrade Netsweeper to version 3.1.10 or 4.0.9 and above, or 4.1.2 and above.
What vulnerable versions are affected by CVE-2014-9618?
CVE-2014-9618 affects Netsweeper versions prior to 3.1.10, 4.0.x versions before 4.0.9, and 4.1.x versions before 4.1.2.
What impact does CVE-2014-9618 have on users?
CVE-2014-9618 allows attackers to create arbitrary profiles by bypassing authentication, potentially leading to unauthorized access and manipulation.
Is CVE-2014-9618 a zero-day vulnerability?
CVE-2014-9618 is not considered a zero-day vulnerability as it was published and disclosed in a timely manner, allowing users to mitigate the risk.