Description

ntopng before 4.2 has an authentication bypass vulnerability. An attacker can bypass the webserver's authentication with a specially crafted HTTP request.

Remediation

Upgrade to the latest version of ntopng

References

ntopng multiple vulnerabilities

ntopng

Related Vulnerabilities

WordPress Plugin WordPress Automatic Security Bypass (3.53.2)

ManageEngine ADSelfService Plus Authentication Bypass (CVE-2021-40539)

WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.3.8)

WordPress Plugin HM Multiple Roles Security Bypass (1.2)

WordPress Plugin WooCommerce Security Bypass (5.6.0)

Severity

High

Classification

CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Authentication Bypass