Ubuntu: Security Advisory (USN-5214-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5214-1: Cacti vulnerabilities

It was discovered that Cacti was incorrectly validating permissions for user accounts that had been recently disabled. An authenticated attacker could possibly use this to obtain unauthorized access to application and system data. CVE-2020-13230 It was discovered that Cacti was incorrectly...

Cacti Cross-Site Scripting (CVE-2020-13231)

A cross site scripting vulnerability exists in Cacti. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

Fedora: Security Advisory for cacti-spine (FEDORA-2020-8560db8779)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for cacti-spine (FEDORA-2020-d50b988a2f)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for cacti (FEDORA-2020-d50b988a2f)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 31 : cacti / cacti-spine (2020-d50b988a2f)

Update to 1.2.12 Release notes: https://www.cacti.net/releasenotes.php?version=1.2.12 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 32 : cacti / cacti-spine (2020-8560db8779)

Update to 1.2.12 Release notes: https://www.cacti.net/releasenotes.php?version=1.2.12 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

CVE-2020-13231

In Cacti before 1.2.11, authprofile.php?action=edit allows CSRF for an admin email change...

CVE-2020-13231

CVE-2020-13231 affects Cacti prior to 1.2.11, where auth_profile.php?action=edit permits CSRF to change an admin email. The root cause is improper CSRF protection in the affected admin profile edit flow, enabling an attacker to trigger an admin email change without authentication. Impacts include...