Lucene search

K
mageiaGentoo FoundationMGASA-2016-0178
HistoryMay 18, 2016 - 11:14 p.m.

Updated cacti packages fix security vulnerabilities

2016-05-1823:14:22
Gentoo Foundation
advisories.mageia.org
15

0.012 Low

EPSS

Percentile

85.4%

Updated cacti package fixes security vulnerability: SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parent_id parameter in an item_edit action (CVE-2016-3172). SQL injection vulnerability in graph_view.php in Cacti 0.8.8.g and earlier allows remote authenticated users to execute arbitrary SQL commands via the host_group_data parameter (CVE-2016-3659).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchcacti< 0.8.8f-1.5cacti-0.8.8f-1.5.mga5