PT-2023-28089 · Unknown · Pandora Fms

CVE-2023-41787 · Publicado 2023-11-23 · Atualizado 2024-01-09

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Pandora FMS versions 700 through 772

Description The issue is related to an Uncontrolled Search Path Element vulnerability, which allows for Leveraging/Manipulating Configuration File Search Paths. This vulnerability enables access to files containing sensitive information.

Recommendations For Pandora FMS versions 700 through 772, consider restricting access to sensitive files and configuration paths until a patch is available. As a temporary workaround, review and secure configuration file search paths to minimize the risk of exploitation.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2023-41787

Produtos afetados

Pandora Fms

Referências · 5

• https://t.me/cvenotify/61044 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-41787 · Nota de Segurança
• https://t.me/true_secator/5271 · Publicação no Telegram
• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-41787 · Aviso do Fabricante