PT-2024-23116 · Cacti+3 · Cacti+3

Ishgard-2 · Publicado 2023-07-13 · Atualizado 2025-01-24 · CVE-2024-29894

Positive Technologies (AI Summary) · Pt

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Nome do software vulnerável e versões afetadas

Versões do Cacti anteriores à 1.2.27

Descrição

O Cacti fornece uma estrutura de monitoramento operacional e gerenciamento de falhas. Ele contém uma vulnerabilidade residual de cross-site scripting.

Recomendações

Para versões anteriores à 1.2.27, atualize para a versão 1.2.27 ou posterior para resolver o problema.

Exploit

Correção

Improper Encoding or Escaping of Output

XSS

Enumeração de Fraquezas

CWE-116

CWE-79

Identificadores relacionados

ALT-PU-2023-4394

ALT-PU-2023-4396

ALT-PU-2023-5196

ALT-PU-2024-17822

ALT-PU-2025-1813

CVE-2024-29894

GHSA-GRJ5-8FCJ-34GH

GHSA-XWQC-7JC4-XM73

OPENSUSE-SU-2024:0274-1

OPENSUSE-SU-2024:0276-1

OPENSUSE-SU-2024:13962-1

USN-6969-1

Produtos afetados

Alt Linux

Cacti

Linuxmint

Ubuntu

Referências · 69

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_package_import_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_pollers_sqli_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/cacti_filter_sqli_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cacti_unauthenticated_cmd_injection.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29894.json · Exploit
• 🔥 https://github.com/Cacti/cacti/security/advisories/GHSA-grj5-8fcj-34gh · Exploit
• 🔥 https://github.com/Cacti/cacti/security/advisories/GHSA-xwqc-7jc4-xm73 · Exploit
• 🔥 https://github.com/mhaskar/CVE-2020-8813 · Exploit
• 🔥 https://github.com/0xf4n9x/CVE-2022-46169 · Exploit
• 🔥 https://github.com/FredBrave/CVE-2022-46169-CACTI-1.2.22 · Exploit
• 🔥 https://github.com/sAsPeCt488/CVE-2022-46169 · Exploit
• 🔥 https://github.com/ariyaadinatha/cacti-cve-2022-46169-exploit · Exploit
• 🔥 https://github.com/Anthonyc3rb3ru5/CVE-2022-46169 · Exploit
• 🔥 https://github.com/deadyP00l/CVE-2022-46169 · Exploit
• 🔥 https://github.com/c3rrberu5/CVE-2022-46169 · Exploit