Local File Inclusion (RCE) in Cacti
概要
Local File Inclusion (RCE) in Cacti
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB). While using the detected SQL Injection and insufficient processing of the include file path, it is possible to execute arbitrary code on the server. Exploitation of the vulnerability is possible for an authorized user. The vulnerable component is the link.php. Impact of the vulnerability execution of arbitrary code on the server.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2023-49084 cacti 修正版: 1.2.16+ds1-2+deb11u3
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web packetstormsecurity.com
- web lists.debian.org
- web lists.fedoraproject.org