CVE-2022-26309

🗓️ 01 Aug 2022 12:44:32Reported by ARTICAType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 58 Views

Pandora FMS v7.0NG.759 CSRF vulnerability leading to privilege escalation

Reporter	Title	Published	Views	Family All 12
Huntr	Cross-Site Request Forgery (CSRF) to User Privilege Escalation	19 Feb 202217:12	–	huntr
ATTACKERKB	CVE-2022-26309	13 May 202208:00	–	attackerkb
CNNVD	Artica Pandora FMS 跨站请求伪造漏洞	1 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-26309 Cross-Site Request en Bulk operation (User operation)	1 Aug 202212:44	–	cvelist
EUVD	EUVD-2022-30870	3 Oct 202520:07	–	euvd
NVD	CVE-2022-26309	1 Aug 202213:15	–	nvd
OSV	CVE-2022-26309	1 Aug 202213:15	–	osv
OSV	UBUNTU-CVE-2022-26309	1 Aug 202213:15	–	osv
Prion	Cross site request forgery (csrf)	1 Aug 202213:15	–	prion
Positive Technologies	PT-2022-17777 · Unknown · Pandora Fms	1 Aug 202200:00	–	ptsecurity

NVD

Node

pandorafms pandora_fmsRange≤7.0_ng_759

[
  {
    "platforms": [
      "all"
    ],
    "product": "Pandora FMS",
    "vendor": "Artica PFMS",
    "versions": [
      {
        "lessThanOrEqual": "v760",
        "status": "affected",
        "version": "v760",
        "versionType": "custom"
      }
    ]
  }
]