CVE-2010-4279

🗓️ 02 Dec 2010 17:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 62 Views🌐 WEB

The default configuration of Pandora FMS 3.1 allows authentication bypass

Reporter	Title	Published	Views	Family All 18
0day.today	Pandora FMS <= 3.1 Mullti Vulnerability	1 Dec 201000:00	–	zdt
0day.today	Pandora 3.1 Auth Bypass / Arbitrary File Upload Vulnerabilities	7 Jan 201500:00	–	zdt
Circl	CVE-2010-4279	30 Nov 201000:00	–	circl
Cvelist	CVE-2010-4279	2 Dec 201017:00	–	cvelist
Exploit DB	Pandora FMS 3.1 - Authentication Bypass	30 Nov 201000:00	–	exploitdb
Exploit DB	Pandora FMS 3.1 - Authentication Bypass / Arbitrary File Upload (Metasploit)	8 Jan 201500:00	–	exploitdb
exploitpack	Pandora FMS 3.1 - Authentication Bypass	30 Nov 201000:00	–	exploitpack
Metasploit	Pandora FMS v3.1 Auth Bypass and Arbitrary File Upload Vulnerability	3 Dec 201313:23	–	metasploit
NVD	CVE-2010-4279	2 Dec 201017:15	–	nvd
OpenVAS	Pandora FMS Authentication Bypass And Multiple Input Validation Vulnerabilities	1 Dec 201000:00	–	openvas

NVD

Node

artica pandora_fmsRange≤3.1

OR

artica pandora_fmsMatch1.2

OR

artica pandora_fmsMatch1.3

OR

artica pandora_fmsMatch1.3beta

OR

artica pandora_fmsMatch1.3beta1

OR

artica pandora_fmsMatch1.3beta2

OR

artica pandora_fmsMatch1.3beta3

OR

artica pandora_fmsMatch1.3.1

OR

artica pandora_fmsMatch2.0

OR

artica pandora_fmsMatch2.0beta

OR

artica pandora_fmsMatch2.1

OR

artica pandora_fmsMatch2.1.1

OR

artica pandora_fmsMatch3.0

OR

artica pandora_fmsMatch3.0rc1

OR

artica pandora_fmsMatch3.0rc2

OR

artica pandora_fmsMatch3.1rc1

Source	Link
exploit-db	www.exploit-db.com/exploits/35731/
packetstormsecurity	www.packetstormsecurity.com/files/129830/Pandora-3.1-Auth-Bypass-Arbitrary-File-Upload.html
secunia	www.secunia.com/advisories/42347
exploit-db	www.exploit-db.com/exploits/15639
securityfocus	www.securityfocus.com/archive/1/514939/100/0/threaded
securityfocus	www.securityfocus.com/bid/45112
seclists	www.seclists.org/fulldisclosure/2010/Nov/326
sourceforge	www.sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download
osvdb	www.osvdb.org/69549

Parameter	Position	Path	Description	CWE
loginhash_data	query param	pandora_console/index.php	Authentication bypass via loginhash MD5-based hash when loginhash_pwd is empty.	CWE-287
loginhash_user	query param	pandora_console/index.php	Authentication bypass via loginhash MD5-based hash when loginhash_pwd is empty.	CWE-287
loginhash	query param	pandora_console/index.php	Authentication bypass via loginhash MD5-based hash when loginhash_pwd is empty.	CWE-287

29 Apr 2026 01:13Current

6.8Medium risk

Vulners AI Score6.8

CVSS 210

EPSS0.81755

pandora fms authentication bypass cve-2010-4279 nvd security vulnerability