PT-2020-19374 · Cacti+2 · Cacti+2

0Xfatty · Publicado 2020-01-16 · Atualizado 2025-01-24 · CVE-2020-7106

Positive Technologies (AI Summary) · Pt

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Nome do software vulnerável e versões afetadas

Cacti versão 1.2.8

Descrição

O problema diz respeito a XSS armazenado em vários arquivos PHP, incluindo data sources.php, color templates item.php, graphs.php, graph items.php, lib/api automation.php, user admin.php e user group admin.php. Isso é demonstrado pelo parâmetro description em data sources.php, onde uma string bruta do banco de dados é exibida por $header, acionando o XSS.

Recomendações

Para a versão 1.2.8 do Cacti, considere desativar os arquivos PHP afetados ou restringir o acesso a eles até que um patch esteja disponível. Como solução temporária, evite usar o parâmetro description nos arquivos afetados para minimizar o risco de exploração.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

ALT-PU-2020-1488

ALT-PU-2020-3430

ALT-PU-2025-1813

CVE-2020-7106

DLA-2069-1

DLA-2965-1

OPENSUSE-SU-2020:0272-1

OPENSUSE-SU-2020:0284-1

OPENSUSE-SU-2020:0558-1

OPENSUSE-SU-2020:0565-1

OPENSUSE-SU-2020:0654-1

OPENSUSE-SU-2020_0272-1

OPENSUSE-SU-2020_0558-1

OPENSUSE-SU-2020_0654-1

OPENSUSE-SU-2024:10670-1

Produtos afetados

Alt Linux

Cacti

Suse

Referências · 96

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_pollers_sqli_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_package_import_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cacti_unauthenticated_cmd_injection.rb · Exploit
• 🔥 https://github.com/Cacti/cacti/issues/3191 · Exploit
• 🔥 https://github.com/mhaskar/CVE-2020-8813 · Exploit
• 🔥 https://github.com/0xf4n9x/CVE-2022-46169 · Exploit
• 🔥 https://github.com/FredBrave/CVE-2022-46169-CACTI-1.2.22 · Exploit
• 🔥 https://github.com/sAsPeCt488/CVE-2022-46169 · Exploit
• 🔥 https://github.com/ariyaadinatha/cacti-cve-2022-46169-exploit · Exploit
• 🔥 https://github.com/botfather0x0/CVE-2022-46169 · Exploit
• 🔥 https://github.com/Anthonyc3rb3ru5/CVE-2022-46169 · Exploit
• 🔥 https://github.com/deadyP00l/CVE-2022-46169 · Exploit
• 🔥 https://github.com/c3rrberu5/CVE-2022-46169 · Exploit
• 🔥 https://github.com/thisisveryfunny/CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 · Exploit
• 🔥 https://github.com/p0dalirius/CVE-2020-8813-Cacti-RCE-in-graph_realtime · Exploit