PT-2024-5186 · Cacti+3 · Cacti+3
Egidioromano
·
Published
2020-03-15
·
Updated
2026-01-20
·
CVE-2024-25641
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Cacti versions prior to 1.2.27
Description:
Cacti provides an operational monitoring and fault management framework. An arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code on the web server. The vulnerability is located within the
import package() function defined in the /lib/import.php script. This function blindly trusts the filename and file content provided within the XML data and writes such files into the Cacti base path, potentially leading to the execution of arbitrary PHP code or other security impacts.Recommendations:
For versions prior to 1.2.27, update to version 1.2.27 or later to resolve the issue. As a temporary workaround, consider disabling the
import package() function or restricting access to the "Package Import" feature until a patch is applied. Additionally, restrict access to the /lib/import.php script to minimize the risk of exploitation. Avoid using the "Import Templates" permission for non-essential users until the issue is resolved.Exploit
Fix
LPE
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Cacti
Linuxmint
Ubuntu