Published: 09/01/2020 Updated: 22/01/2020

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 405

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer prior to 9.0.1.19899 does not validate user permissions, which allow remote malicious users to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters.

Vulnerable Product	Search on Vulmon	Subscribe to Product
plixer scrutinizer netflow \\& sflow analyzer

Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer wwwtrustwavecom/spiderlabs/advisories/TWSL2012-008txt Published: 04/11/12 Version: 10 Vendor: Plixer International (wwwplixercom) Product: Scrutinizer NetFlow and sFlow Analyzer Version affected: 862 ( ...

Scrutinizer NetFlow and sFlow Analyzer version 862 suffers from authentication bypass, cross site scripting, and remote SQL injection vulnerabilities ...

CWE-287 https://exchange.xforce.ibmcloud.com/vulnerabilities/74824 http://www.securityfocus.com/bid/52989 http://www.exploit-db.com/exploits/18750 http://packetstormsecurity.org/files/111791/Scrutinizer-8.6.2-Bypass-Cross-Site-Scripting-SQL-Injection.html https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/twsl2012-008-multiple-vulnerabilities-in-scrutinizer-netflow-sflow-analyzer/https://nvd.nist.gov https://www.exploit-db.com/exploits/18750/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-1258

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect