CVE-2015-6237

Critical

Published: 27/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The RPC service in Tripwire IP360 VnE Manager versions 7.2.2 and earlier allows remote attackers to bypass authentication and enumerate users, reset passwords, or manipulate IP filter restrictions via crafted 'privileged commands'.

Risk Assessment

Attackers can gain access to sensitive information and take control of the system, posing a serious threat to the organization's security.

Recommendation

It is recommended to upgrade to version 7.2.6 or later to secure the system against these vulnerabilities.

Original NVD description (English source)

The RPC service in Tripwire (formerly nCircle) IP360 VnE Manager 7.2.2 before 7.2.6 allows remote attackers to bypass authentication and (1) enumerate users, (2) reset passwords, or (3) manipulate IP filter restrictions via crafted "privileged commands."