Cacti Privilege Escalation

CVE-2023-31132

What is CVE-2023-31132?

Cacti, an open-source operational monitoring and fault management framework, is affected by a privilege escalation issue. This vulnerability allows an attacker with low-level OS user access on a Windows system hosting Cacti to create arbitrary PHP files in a web document directory. The attacker can execute these files with SYSTEM-level privileges, enabling them to escalate their access beyond a normal user account. Cacti version 1.2.25 addresses this vulnerability, and users are strongly urged to upgrade to protect their systems, as there are no known workarounds.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References