CWE Code: 287
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Improper Authentication
Summary: the rpc service in tripwire (formerly ncircle) ip360 vne manager 7.2.2 before 7.2.6 allows remote attackers to bypass authentication and (1) enumerate users, (2) reset passwords, or (3) manipulate ip filter restrictions via crafted "privileged commands."
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-12-27
Last Modified Date: 2018-10-09