CVE-2015-8368

Publication date 17 December 2015

Last updated 24 July 2024


Ubuntu priority

ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/password_reset.lua.

Status

Package Ubuntu Release Status
ntopng 16.04 LTS xenial
Not affected
15.10 wily Ignored end of life
15.04 vivid Ignored end of life
14.04 LTS trusty Not in release
12.04 LTS precise Not in release