Cross-Site Request Forgery Vulnerability in PRTG Network Monitor
CVE-2021-34547

4.3MEDIUM

Key Information:

Vendor

Paessler

Status
Prtg Network Monitor
Vendor
CVE Published:
10 June 2021

What is CVE-2021-34547?

PRTG Network Monitor version 20.1.55.1775 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability that can be exploited to create user accounts without proper authorization. This weakness allows malicious actors to send crafted requests that, if executed by an authenticated user, could lead to unauthorized access and modifications within the application, compromising network security management.

References

https://github.com/likhihcv/PRTG_Network_Monitor_20.1.55....
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.