Beveiligingsadvies
CVE-2021-32099
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
A SQL injection vulnerability in the pandora_console component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his unprivileged session via the /include/chart_generator.php session_id parameter, leading to a login bypass.