PT-2024-3806 · Cacti+3 · Cacti+3
Ishgard-2
·
Published
2023-07-13
·
Updated
2025-01-24
·
CVE-2024-31460
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Cacti versions prior to 1.2.27
Description
Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in
automation tree rules.php is not thoroughly checked and is used to concatenate the SQL statement in create all header nodes() function from lib/api automation.php, finally resulting in SQL injection. Using SQL based secondary injection technology, attackers can modify the contents of the Cacti database, and based on the modified content, it may be possible to achieve further impact, such as arbitrary file reading, and even remote code execution through arbitrary file writing.Recommendations
To resolve the issue, update to version 1.2.27 or later, as it contains a patch for the issue. As a temporary workaround, consider restricting access to the
create all header nodes() function and the automation tree rules.php file to minimize the risk of exploitation. Additionally, avoid using the vulnerable SQL statement concatenation in the lib/api automation.php file until the issue is resolved.Exploit
Fix
RCE
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Cacti
Linuxmint
Ubuntu