CVE-2015-8368 Privilege escalation in n/a

What is CVE-2015-8368?

CVE-2015-8368 is a medium-severity vulnerability in n/a, published on 17 Dec 2015. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/password_reset.lua.

Weakness: CWE-254

Which versions are affected by CVE-2015-8368?

It affects 1 product.

Products include Ntop Ntopng.

How do I fix CVE-2015-8368?

No fix has been published for CVE-2015-8368 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-8368 being exploited?

There is no known exploitation of CVE-2015-8368 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in n/a

• CVE-2026-38968 Weak cryptography in n/a Critical 9.8
• CVE-2017-5473 Cross-site request forgery in n/a High 8.8
• CVE-2018-12520 Weak cryptography in n/a High 8.1
• CVE-2017-7458 Null dereference in n/a High 7.5
• CVE-2017-7459 Other in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-h398-48h8-5rg7.