CVE-2015-6237

The RPC service in Tripwire (formerly nCircle) IP360 VnE Manager 7.2.2 before 7.2.6 allows remote attackers to bypass authentication and (1) enumerate users, (2) reset passwords, or (3) manipulate IP filter restrictions via crafted "privileged commands."

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-12-27

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Ip360 (Tripwire)

References

• http://seclists.org/fulldisclosure/2015/Oct/20
• http://www.securityfocus.com/archive/1/536609/100/0/threaded