Total vulnerabilities in the database
Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and remove IP addresses from the quarantine via the ip parameter to webadmin/user/quarantine_disable.php.
| Software | From | Fixed in |
|---|---|---|
| netsweeper / netsweeper | - | 3.1.9.x |
| netsweeper / netsweeper | 4.1.1 | 4.1.1.x |
| netsweeper / netsweeper | 4.1.0 | 4.1.0.x |
| netsweeper / netsweeper | 4.0.8 | 4.0.8.x |
| netsweeper / netsweeper | 4.0.7 | 4.0.7.x |
| netsweeper / netsweeper | 4.0.6 | 4.0.6.x |
| netsweeper / netsweeper | 4.0.5 | 4.0.5.x |
| netsweeper / netsweeper | 4.0.4 | 4.0.4.x |
| netsweeper / netsweeper | 4.0.3 | 4.0.3.x |
| netsweeper / netsweeper | 4.0.2 | 4.0.2.x |
| netsweeper / netsweeper | 4.0.1 | 4.0.1.x |
| netsweeper / netsweeper | 4.0.0 | 4.0.0.x |