cacti security update

2014-07-1507:36:29

lists.debian.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

83.6%

JSON

Package : cacti
Version : 0.8.7g-1+squeeze4
CVE ID : CVE-2014-2326 CVE-2014-2327 CVE-2014-2328
CVE-2014-2708 CVE-2014-2709 CVE-2014-4002
Debian Bug : 742768 743565 752573

Multiple security issues (cross-site scripting, cross-site request
forgery, SQL injections, missing input sanitising) have been found in
Cacti, a web frontend for RRDTool.