CVE Catalog
CVE-2014-9611
CriticalSummary
Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmin/nslam/index.php.
Risk Assessment
Attackers can gain unauthorized access to the system, potentially leading to serious security breaches and loss of control over configuration.
Recommendation
It is recommended to upgrade Netsweeper to version 4.0.5 or later to mitigate this vulnerability.
Original NVD description (English source)
Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmin/nslam/index.php.