Input validation

2020-02-0617:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

JSON

An issue was discovered in OpServices OpMon 9.3.2. Without authentication, it is possible to read server files (e.g., /etc/passwd) due to the use of the nmap -iL (aka input file) option.

CPENameOperatorVersion
opmoneq9.3.2

CPE	Name	Operator	Version
	opmon	eq	9.3.2

References

medium.com/%40ph0rensic

medium.com/%40ph0rensic/three-cves-on-opmon-3ca775a262f5