Beveiligingsadvies

CVE-2021-32099

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-05-07 03:51:15
Laatst bijgewerkt 2024-08-03 23:17:28
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

A SQL injection vulnerability in the pandora_console component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his unprivileged session via the /include/chart_generator.php session_id parameter, leading to a login bypass.