Fedora 30 : cacti / cacti-spine (2019-6bf27b45b3)

Update to 1.2.8 Release notes: https://www.cacti.net/releasenotes.php?version=1.2.8 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Cacti < 1.2.7 Information Disclosure Vulnerability - Windows

In Cacti, authenticated users may bypass authorization checks for viewing a graph via a direct graphjson.php request with a modified localgraphid parameter. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cacti < 1.2.7 Information Disclosure Vulnerability - Linux

In Cacti, authenticated users may bypass authorization checks for viewing a graph via a direct graphjson.php request with a modified localgraphid parameter. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

FreeBSD : cacti -- Authenticated users may bypass authorization checks (ed18aa92-e4f4-11e9-b6fa-3085a9a95629)

The cacti developers reports : In Cacti through 1.2.6, authenticated users may bypass authorization checks for viewing a graph via a direct graphjson.php request with a modified localgraphid parameter. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2019-16723

In Cacti through 1.2.6, authenticated users may bypass authorization checks for viewing a graph via a direct graphjson.php request with a modified localgraphid parameter...

UBUNTU-CVE-2019-16723

In Cacti through 1.2.6, authenticated users may bypass authorization checks for viewing a graph via a direct graphjson.php request with a modified localgraphid parameter...

CVE-2019-16723

CVE-2019-16723 affects Cacti until 1.2.6. An authenticated user can bypass authorization to view a graph by calling graph_json.php with a modified local_graph_id, effectively an IDOR-style flaw. Remediation per connected sources is to upgrade to a fixed release (examples include Cacti 1.2.9+; som...

CVE-2017-16723

The CVE-2017-16723 issue affects Phoenix Contact FL COMSERVER family and PSI-MODEM/ETH devices (BASIC/UNI/BAS/UNI-T/RS232/RS485) with firmware versions before 1.99, 2.20, or 2.40. Root cause: improper neutralization of input during web page generation (CWE-79), enabling Cross‑Site Scripting that ...