| Package | Affected versions | Patched versions |
|---|---|---|
| netsweeper | = 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.1.0= 4.1.1≤ 3.1.9 |
Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and remove IP addresses from the quarantine via the ip parameter to webadmin/user/quarantine_disable.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free