NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator privileges via a direct request.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://www.securityfocus.com/archive/1/493171/100/0/threaded | mailing list |
http://secunia.com/advisories/30514 | third party advisory vendor advisory |
http://osvdb.org/46195 | vdb entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/42938 | vdb entry |