| Package | Affected versions | Patched versions |
|---|---|---|
| prtg network monitor | < 18.2.40.1683 | 18.2.40.1683 |
PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an HTTP request because /api/addusers doesn't check, or doesn't properly check, user rights.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free