Описание
An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by requesting a password change and specifying the admin parameter.
Ссылки
- Release NotesVendor Advisory
- ExploitThird Party AdvisoryVDB Entry
- Release NotesVendor Advisory
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 3.7.3 (исключая)
cpe:2.3:a:tildeslash:monit:*:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.0044
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-640
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by requesting a password change and specifying the admin parameter.
EPSS
Процентиль: 63%
0.0044
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-640