CVE-2013-3500

2013-05-0810:00:00

mitre

www.cve.org

groundwork

monitor

webapp

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

68.0%

JSON

The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under /usr/local/groundwork, which allows context-dependent attackers to bypass intended filesystem restrictions by leveraging access to a GroundWork script.