Launchpad.net

CVE 2015-8368

ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/password_reset.lua.

See the CVE page on Mitre.org for more details.

References