Skip to content
OpenAdvisories
Unscored USN-6571-1 1 CVE

monit vulnerability

Published Jan 9, 2024 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

Youssef Rebahi-Gilbert discovered that Monit did not properly process
credentials for disabled accounts. An attacker could possibly use this
issue to login to the platform with an expired account and a valid
password.

Fixed packages 5

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS monit 1:5.6-2ubuntu0.1+esm3
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS monit 1:5.16-2ubuntu0.2+esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS monit 1:5.25.1-1ubuntu0.1~esm2
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS monit 1:5.26.0-4ubuntu0.1~esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS monit 1:5.31.0-1ubuntu0.1~esm1

Vulnerabilities 1

  • Unscored —
    CVE-2022-26563

    An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to …

    monit monit Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-26563