Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-36697
HistoryNov 03, 2021 - 12:15 p.m.

Design/Logic Flaw

2021-11-0312:15:00
PRIOn knowledge base
www.prio-n.com
2

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

With an admin account, the .htaccess file in Artica Pandora FMS <=755 can be overwritten with the File Manager component. The new .htaccess file contains a Rewrite Rule with a type definition. A normal PHP file can be uploaded with this new “file type” and the code can be executed with an HTTP request.

CPENameOperatorVersion
pandora_fmsle755

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

Related for PRION:CVE-2021-36697