Threat Investigation
Request a demo

CVE-2018-19411

High

Description

PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an HTTP request because /api/addusers doesn't check, or doesn't properly check, user rights.

SeverityHigh
CVSS8.8
Exploit probability—
ProductPaessler Prtg Network Monitor
PublishedNov 21, 2018
First seenNov 21, 2018

How to fix

Update
  • paessler prtg_network_monitor18.2.40.1683 or later

Affected products

ProductAffected versionsFixed in
paessler prtg_network_monitorv < 18.2.40.168318.2.40.1683

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.