Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-3325
HistoryJan 27, 2021 - 7:15 p.m.

Design/Logic Flaw

2021-01-2719:15:00
PRIOn knowledge base
www.prio-n.com
5

9.4 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.1%

Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an installation without a hosts_deny option). This issue occurred because a new access-control feature was introduced without considering that some exiting installations became unsafe, upon an update to 3.13.0, unless the new feature was immediately configured.

CPENameOperatorVersion
fedoraeq32
fedoraeq33
monitorixeq3.13.0

9.4 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.1%