PT-2020-7180 · Plixer International · Scrutinizer Netflow & Sflow Analyzer

Tanya Secker · Published 2020-01-09 · Updated 2020-01-22 · CVE-2012-1258

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Plixer International Scrutinizer NetFlow & sFlow Analyzer versions prior to 9.0.1.19899

Description The issue concerns a lack of user permission validation in the cgi-bin/userprefs.cgi component. This allows remote attackers to create new user accounts with administrator privileges by exploiting the newuser, pwd, and selectedUserGroup parameters.

Recommendations For versions prior to 9.0.1.19899, update to version 9.0.1.19899 or later to resolve the issue. As a temporary workaround, consider restricting access to the cgi-bin/userprefs.cgi component to prevent unauthorized account creation.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-1258

Affected Products

Scrutinizer Netflow & Sflow Analyzer

References · 8

• 🔥 http://exploit-db.com/exploits/18750 · Exploit
• 🔥 https://exploit-db.com/exploits/18750 · Exploit
• 🔥 http://packetstormsecurity.org/files/111791/Scrutinizer-8.6.2-Bypass-Cross-Site-Scripting-SQL-Injection.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-1258 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74824 · Note
• https://t.me/cibsecurity/9083 · Telegram Post
• https://trustwave.com/en-us/resources/blogs/spiderlabs-blog/twsl2012-008-multiple-vulnerabilities-in-scrutinizer-netflow-sflow-analyzer · Note
• http://securityfocus.com/bid/52989 · Note