Back to Database
Status published
High
CVE-2018-19411
PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with...
Vulnerability Description
PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an HTTP request because /api/addusers doesn't check, or doesn't properly check, user rights.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-19411
Credits & Attribution
No credits recorded in the NVD database.
More from paessler
View All →CVE-2022-35739
PRTG Network Monitor through 22.2.77.2204 does not prevent custom input...
Unknown
0
CVE-2021-34547
PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account...
Medium
4.3
CVE-2021-29643
PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an...
Medium
5.4
CVE-2021-27220
An issue was discovered in PRTG Network Monitor before 21.1.66.1623....
Medium
5.3
CVE-2020-14073
XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map...
Medium
5.4
Affected Vendor
paessler
View all reports →Affected Software
prtg network monitor
Vulnerable Versions:
0
Timeline
Official Publish:
November 21st, 2018
Last Modified:
September 17th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.