PT-2017-14295 · Artica · Artica Pandora Fms

Publicado 2017-10-27 · Atualizado 2017-11-14 · CVE-2017-15936

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.0

Description The issue allows an attacker with write permission to create an agent containing an XSS payload. When a user accesses the agent definitions page, the malicious script is executed.

Recommendations For Artica Pandora FMS version 7.0, consider restricting write permissions to prevent unauthorized users from creating agents with malicious payloads. As a temporary workaround, avoid accessing the agent definitions page until a fix is available.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-15936

Produtos afetados

Artica Pandora Fms

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-15936 · Aviso do Fabricante
• https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-15936 · Nota de Segurança