Intrusion PreventionPlixer.Scrutinizer.Authentication.Bypass
Description
This indicates an attack attempt to exploit an Authentication Bypass vulnerability in Plixer Scrutinizer.
The vulnerability is due to a validation error in the application when handling an HTTP request. Via an HTTP request, an unauthenticated remote attacker may be able to exploit this to bypass authentication on vulnerable systems by adding administrative accounts.
Affected Products
Plixer Scrutinizer version before 9.5.0
Impact
Security Bypass: Remote attackers can bypass security features of vulnerable systems by adding administrative accounts without authentication.
Recommended Actions
Currently we are not aware any vendor provided patch to address this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 48001 |
| Created | Jun 10, 2019 |
| Updated | Jun 27, 2019 |
| Risk |
|
| CVE ID | CVE-2012-2626 |
| Exploit Prediction Score | 81.49% |
| Default Action | drop |
| Active | |
| Affected OS | Other |
| Affected App | Other |