Description
NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator privileges via a direct request.
References
- 20080606 Vulnerability in Network General/Net Scout product mailing-list
- 30514 third-party-advisory
- 46195 vdb-entry
- networkgeneral-adddomain-security-bypass(42938) vdb-entry