CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4677

Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Console to scrape the cron logs directory for cron log backups. The contents of these log files can then be abused to authenticate to the application as an administrator. This issue affects Pandora FMS <= 772.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 32.1%

CVSS Severity

CVSS v3 Score 7.0

References

Products affected by CVE-2023-4677

Artica » Pandora Fms » Version: 700

cpe:2.3:a:artica:pandora_fms:700
Artica » Pandora Fms » Version: 740

cpe:2.3:a:artica:pandora_fms:740
Artica » Pandora Fms » Version: 741

cpe:2.3:a:artica:pandora_fms:741
Artica » Pandora Fms » Version: 742

cpe:2.3:a:artica:pandora_fms:742
Artica » Pandora Fms » Version: 743

cpe:2.3:a:artica:pandora_fms:743
Artica » Pandora Fms » Version: 744

cpe:2.3:a:artica:pandora_fms:744
Artica » Pandora Fms » Version: 745

cpe:2.3:a:artica:pandora_fms:745
Artica » Pandora Fms » Version: 746

cpe:2.3:a:artica:pandora_fms:746
Artica » Pandora Fms » Version: 747

cpe:2.3:a:artica:pandora_fms:747
Artica » Pandora Fms » Version: 748

cpe:2.3:a:artica:pandora_fms:748
Artica » Pandora Fms » Version: 749

cpe:2.3:a:artica:pandora_fms:749
Artica » Pandora Fms » Version: 750

cpe:2.3:a:artica:pandora_fms:750
Artica » Pandora Fms » Version: 751

cpe:2.3:a:artica:pandora_fms:751
Artica » Pandora Fms » Version: 752

cpe:2.3:a:artica:pandora_fms:752
Artica » Pandora Fms » Version: 753

cpe:2.3:a:artica:pandora_fms:753
Artica » Pandora Fms » Version: 754

cpe:2.3:a:artica:pandora_fms:754
Artica » Pandora Fms » Version: 755

cpe:2.3:a:artica:pandora_fms:755

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4677

Products

Pricing

Contact Us