Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3fgg-2gjx-mcfm

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-6409.

M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-6409.

EPSS

Процентиль: 89%
0.04879
Низкий

Связанные уязвимости

nvd
больше 11 лет назад

M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-6409.

EPSS

Процентиль: 89%
0.04879
Низкий