Path traversal

2023-11-2315:15:00

PRIOn knowledge base

www.prio-n.com

path traversal

pandora fms

configuration file

database compromise

vulnerability

nvd

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.3%

JSON

Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File Search Paths. This vulnerability allows to access the server configuration file and to compromise the database. This issue affects Pandora FMS: from 700 through 773.

CPENameOperatorVersion
pandora_fmsge700
pandora_fmsle773

CPE	Name	Operator	Version
	pandora_fms	ge	700
	pandora_fms	le	773

References

pandorafms.com/en/security/common-vulnerabilities-and-exposures/