PT-2001-2237 · Netop · Netop School

Published 2001-09-11 · Updated 2017-12-19 · CVE-2001-1094

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetOp School version 1.5

Description The issue allows local users to bypass access restrictions on the administration version of the software. This can be achieved by logging into the student version, closing it, and then starting the administration version.

Recommendations For NetOp School version 1.5, consider restricting access to the student version to prevent unauthorized users from bypassing access restrictions on the administration version. As a temporary workaround, monitor and control user access to the administration version until a fix is available.

Fix

Related Identifiers

CVE-2001-1094

Affected Products

Netop School

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-1094 · Security Note
• http://securityfocus.com/bid/3321 · Vendor Advisory
• http://securityfocus.com/archive/1/213516 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7120 · Note