Lucene search
PRIOn knowledge basePRION:CVE-2022-43978HistoryJan 27, 2023 - 10:15 p.m.
Authentication flaw
2023-01-2722:15:00
PRIOn knowledge base
www.prio-n.com
4
authentication
vulnerability
pandora fms
static secret
generatepublichash
attacker
bypass
There is an improper authentication vulnerability in Pandora FMS v764. The application verifies that the user has a valid session when he is not trying to do a login. Since the secret is static in generatePublicHash function, an attacker with knowledge of a valid session can abuse this in order to pass the authentication check.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pandora_fms | lt | 766 |
Related
cvelist
cvelist
CVE-2022-43978 Limited Authentication bypass due to hardcoded secret
2023-01-27 00:00:00
cve
cve
CVE-2022-43978
2023-01-27 22:15:08
nvd
nvd
CVE-2022-43978
2023-01-27 22:15:08