CVE-2014-9618
CriticalSummary
The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.
Risk Assessment
Attackers can gain access to administrative functions, potentially leading to unauthorized changes in system configuration and security breaches.
Recommendation
It is recommended to update Netsweeper to the latest version to mitigate this vulnerability and implement additional security measures to protect the admin portal.
Original NVD description (English source)
The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.