CVE-2018-19411

PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including…

published November 21, 2018

CVSS
—
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an HTTP request because /api/addusers doesn't check, or doesn't properly check, user rights.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00870 · 58.4th percentile
Published
2018-11-21T16:00Z
EPSS history
Timeline
  • 21 NOV 16:00Z
    PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including…
    cvelistv5