Lucene search
HistoryJun 10, 2024 - 3:15 p.m.
CVE-2024-35305
sql injection
http request
authorization header
pandora fms.
8.9 High
CVSS4
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H/AU:Y/U:Green/RE:L
7.7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%
Unauth Time-Based SQL Injection in API allows to exploit HTTP request Authorization header. This issue affects Pandora FMS: from 700 through <777.
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"all"
],
"product": "Pandora FMS",
"vendor": "Pandora FMS",
"versions": [
{
"lessThan": "777",
"status": "affected",
"version": "700",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2024-35305
2024-06-10 15:15:51
cvelist
cvelist
CVE-2024-35305 Unauth Time-Based SQL Injection via API
2024-06-10 14:28:18
vulnrichment
vulnrichment
CVE-2024-35305 Unauth Time-Based SQL Injection via API
2024-06-10 14:28:18
8.9 High
CVSS4
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H/AU:Y/U:Green/RE:L
7.7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%
Related for CVE-2024-35305