Security Advisory

CVE-2018-19411

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-11-21 16:00:00

Last updated 2024-09-17 01:05:43

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an HTTP request because /api/addusers doesn't check, or doesn't properly check, user rights.

← Browse all CVEs View on cve.org ↗