Intrusion Prevention

Plixer.Scrutinizer.Authentication.Bypass

Description

This indicates an attack attempt to exploit an Authentication Bypass vulnerability in Plixer Scrutinizer.
The vulnerability is due to a validation error in the application when handling an HTTP request. Via an HTTP request, an unauthenticated remote attacker may be able to exploit this to bypass authentication on vulnerable systems by adding administrative accounts.

Affected Products

Plixer Scrutinizer version before 9.5.0

Impact

Security Bypass: Remote attackers can bypass security features of vulnerable systems by adding administrative accounts without authentication.

Recommended Actions

Currently we are not aware any vendor provided patch to address this issue.

CVE References

CVE-2012-2626