Security Advisory

CVE-2014-6607

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-10-06 23:00:00

Last updated 2024-08-06 12:24:34

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-6409.

← Browse all CVEs View on cve.org ↗