Design/Logic Flaw

An issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user account, it is possible to perform privilege escalation through the lack of correct configuration in the server's sudoers file, which by default allows the execution of programs e.g. nmap without the need for a...

Remote code execution

An issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execution...

CVE-2020-8636

CVE-2020-8636 affects OpServices OpMon 9.3.2. The issue enables Remote Code Execution with a CVSS v3.1 base score of 9.8 (NETWORK, NONE/LOW complexity, no user interaction). Exploitation details are not provided in the documents; no remediation or patch information is listed. Exploitation status ...

CVE-2020-8636

An issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execution...

CVE-2020-7954

An issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user account, it is possible to perform privilege escalation through the lack of correct configuration in the server's sudoers file, which by default allows the execution of programs e.g. nmap without the need for a...

CVE-2020-7954

OpServices OpMon 9.3.2 is affected. The issue allows privilege escalation from the apache user due to a misconfigured sudoers file that by default permits passwordless execution of certain programs (e.g., nmap). Root cause: incorrect sudoers configuration in the server. Impact: local privilege es...

CVE-2020-7953

CVE-2020-7953 affects OpServices OpMon 9.3.2. The issue allows reading server files (e.g., /etc/passwd) without authentication due to the use of nmap -iL (input file) option. Multiple connected sources (including Red Hat and CNVD entries) corroborate this description. The vulnerability impacts co...

CVE-2020-7953

An issue was discovered in OpServices OpMon 9.3.2. Without authentication, it is possible to read server files e.g., /etc/passwd due to the use of the nmap -iL aka input file option...

OpServices OpMon Remote Code Execution Vulnerability

OpServices OpMon is an IT infrastructure monitoring software from Brazil. OpServices OpMon 9.3.2 suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code...

OpServices OpMon SQL Injection Vulnerability

OpServices is the technology used to manage and monitor IT environments. In addition to monitoring any device that generates data in real time, it is also possible to create business data visualizations. OpServices OpMon SQL injection vulnerability can be exploited by attackers to gain access to...

CVE-2020-5841

An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication...

CVE-2020-5841

An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication...

Sql injection

An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication...

CVE-2020-5841

The CVE-2020-5841 entry relates to OpServices OpMon 9.3.1-1. An attacker could perform SQL injection without authentication by manipulating password change parameters, due to improper input handling. This affects the OpMon component and enables access to sensitive database information. The public...

CVE-2020-5841

An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication...