Lucene search
HistoryApr 22, 2003 - 4:00 a.m.
CVE-2002-1479
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges.
Affected configurations
Node
the_cacti_groupcactiMatch0.5
ORthe_cacti_groupcactiMatch0.6
ORthe_cacti_groupcactiMatch0.6.1
ORthe_cacti_groupcactiMatch0.6.2
ORthe_cacti_groupcactiMatch0.6.3
ORthe_cacti_groupcactiMatch0.6.4
ORthe_cacti_groupcactiMatch0.6.5
ORthe_cacti_groupcactiMatch0.6.6
ORthe_cacti_groupcactiMatch0.6.7
ORthe_cacti_groupcactiMatch0.6.8
Related
cvelist
cvelist
CVE-2002-1479
2004-09-01 04:00:00
cve
cve
CVE-2002-1479
2004-09-01 04:00:00
debiancve
debiancve
CVE-2002-1479
2004-09-01 04:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2002-1479