Database backups availability by low-privileged users
CVE-2023-41786

6.8MEDIUM

Key Information:

Vendor

Pandora Fms

Status
Pandora Fms
Vendor
CVE Published:
23 November 2023

What is CVE-2023-41786?

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pandora FMS on all allows File Discovery. This vulnerability allows users with low privileges to download database backups. This issue affects Pandora FMS: from 700 through 772.

Affected Version(s)

Pandora FMS all 700 <= 772

References

https://https://pandorafms.com/en/security/common-vulnera...
vendor-advisory

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Oliver Brooks <[email protected]>
.