MINI-9RXX-8289-V764

Bulletin has no description...

CGA-73FR-V764-PM53

Bulletin has no description...

CVE-2022-43978: Improper Authentication

There is an improper authentication vulnerability in Pandora FMS v764. The application verifies that the user has a valid session when he is not trying to do a login. Since the secret is static in generatePublicHash function, an attacker with knowledge of a valid session can abuse this in order t...

CVE-2022-43978

Pandora FMS vulnerability CVE-2022-43978 affects Pandora FMS version 7.64 (v764). The issue is an improper authentication bypass: the application verifies a valid session when a user is not attempting to log in, due to a static secret in the generatePublicHash function. An attacker who knows a va...

CVE-2022-43979

CVE-2022-43979 affects Pandora FMS version 7.64 (v7.64). It describes a path traversal leading to Local File Inclusion in a user-input parameter that is insufficiently validated, potentially allowing inclusion of arbitrary PHP files on disk and, as stated, remote code execution. Connected sources...

Pandora FMS path traversal vulnerability

PandoraFMS is an application from pandorafms USA. It provides a monitoring feature. A security vulnerability exists in Pandora FMS version v764, which stems from the presence of a path traversal that leads to the inclusion of a local file, which could be exploited by an attacker to cause remote...