PT-2022-10696 · Cacti · Cacti

Published 2022-01-19 · Updated 2022-01-25 · CVE-2021-3816

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cacti version 1.1.38

Description The issue allows authenticated users with User Management permissions to inject arbitrary HTML in the group prefix field during the creation of a new group via the "Copy" method at the "user group admin.php" endpoint. This can be exploited by users with specific permissions, potentially leading to security issues.

Recommendations For Cacti version 1.1.38, consider restricting access to the "Copy" method in the "user group admin.php" endpoint to prevent arbitrary HTML injection in the group prefix field until a patch is available. As a temporary workaround, limit the permissions of users with User Management access to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-3816

Affected Products

Cacti

References · 9

• https://osv.dev/vulnerability/DEBIAN-CVE-2021-3816 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-3816 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3816 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3816 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3816 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3816 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-3816 · Security Note
• https://cacti.net/info/changelog · Vendor Advisory
• https://t.me/cibsecurity/35900 · Telegram Post