Cacti Security Vulnerabilities and Issues — Cacti CVE List

Lucene search

CactiCacti

2 matches found

CVE•added 2020/05/20 2:15 p.m.•64 views

CVE-2020-13230

In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that account (e.g., permission to view logs).

4.3CVSS5.1AI score0.00799EPSS

CVE•added 2020/05/20 2:15 p.m.•57 views

CVE-2020-13231

In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change.

6.5CVSS6.5AI score0.00456EPSS