CVE Vulnerabilities

CVE-2017-15917

Improper Privilege Management

Published: Oct 26, 2017 | Modified: Oct 03, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

In Paessler PRTG Network Monitor 17.3.33.2830, its possible to create a Map as a read-only user, by forging a request and sending it to the server.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Prtg_network_monitor Paessler 17.3.33.2830 (including) 17.3.33.2830 (including)

Potential Mitigations

References