CVE-2023-41787

Published: Nov 23, 2023Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File Search Paths. This vulnerability allows access to files with sensitive information. This issue affects Pandora FMS: from 700 through 772.

Affected (1)

Products: Artica: Pandora Fms

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Artica Pandora Fms	From 700 to 773

Related CWEs

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

Source: security@pandorafms.com

Vendor Advisory

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.