CVE-2015-8368
ntop ntopng: no CVSS score yet. EPSS 5.1% chance of exploitation in the next 30 days.
ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/password_reset.lua.
- EPSS
- 5.1% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- CWE
- CWE-254
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ntop:ntopng
References
- http://packetstormsecurity.com/files/134593/ntop-ng-2.0.15102-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2015/Dec/10
- https://www.exploit-db.com/exploits/38836/
- http://packetstormsecurity.com/files/134593/ntop-ng-2.0.15102-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2015/Dec/10