Описание
Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enable monitoring for a specific service.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | |
| bionic | not-affected | |
| devel | not-affected | |
| esm-apps-legacy/xenial | released | 1:5.16-2ubuntu0.1 |
| esm-apps/bionic | not-affected | |
| esm-apps/xenial | released | 1:5.16-2ubuntu0.1 |
| esm-infra-legacy/trusty | released | 1:5.6-2ubuntu0.1 |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| trusty | released | 1:5.6-2ubuntu0.1 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enable monitoring for a specific service.
Monit before version 5.20.0 is vulnerable to a cross site request forg ...
Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enable monitoring for a specific service.
ALT-PU-2016-2153: package `monit` update to version 5.20.0-alt1
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3