NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator privileges via a direct request.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ngenius_infinistream | Netscout | i1730 (including) | i1730 (including) |
Visualizer | Netscout | v2100 (including) | v2100 (including) |