Описание
spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter.
Ссылки
- Release NotesVendor Advisory
- Issue TrackingPatchThird Party Advisory
- Issue TrackingPatchThird Party Advisory
- Release NotesVendor Advisory
- Issue TrackingPatchThird Party Advisory
- Issue TrackingPatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.1.15 (включая)
cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*
EPSS
Процентиль: 87%
0.02921
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 9 лет назад
spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter.
CVSS3: 9.8
debian
больше 9 лет назад
spikekill.php in Cacti before 1.1.16 might allow remote attackers to e ...
CVSS3: 9.8
github
больше 4 лет назад
spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter.
CVSS3: 9.8
altlinux
почти 8 лет назад
ALT-PU-2019-1006: package `cacti` update to version 1.2.0-alt1
EPSS
Процентиль: 87%
0.02921
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
NVD-CWE-noinfo