CVE-2022-43978

Pandora FMS vulnerability CVE-2022-43978 affects Pandora FMS version 7.64 (v764). The issue is an improper authentication bypass: the application verifies a valid session when a user is not attempting to log in, due to a static secret in the generatePublicHash function. An attacker who knows a va...