Skip to content
OpenAdvisories
High WID-SEC-2023-2275 18 CVEs

Cacti: Mehrere Schwachstellen

Published Sep 5, 2023 · Updated Dec 8, 2024 · Revision 11 · de-DE

Vendor: amazon Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Ubuntu Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.

Product

Cacti ist ein grafisches Frontend zur Visualisierung von statistischen Daten, erfasst durch die Round Robin Database rrdtool.

Vulnerabilities 18

  • Critical 9.8
    CVE-2023-39361 Public exploit Scanner template EPSS 89%

    Unauthenticated SQL Injection in graph_view.php in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graph_view.php. Since guest users can access graph_view.php without authentication by default, if guest users are bei…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • High 8.8
    CVE-2023-39357

    A Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti

    Cacti is an open source operational monitoring and fault management framework. A defect in the sql_save function was discovered. When the column type is numeric, the sql_save function directly utilizes user input. Many files and functions calling the sql_save…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • High 8.8
    CVE-2023-39358

    Authenticated SQL injection vulnerability in reports_user.php in Cacti

    Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • High 8.8
    CVE-2023-39359

    Authenticated SQL injection vulnerability in graphs.php in Cacti

    Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • High 7.8
    CVE-2023-31132

    Cacti Privilege Escalation

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a privilege escalation vulnerability. A low-privileged OS user with access to a Windows host where Cacti is installed can create arbitrary PHP file…

    Cacti cacti
  • High 7.2
    CVE-2023-39362 Public exploit EPSS 85%

    Authenticated command injection in SNMP options of a Device

    Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining …

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2023-39360

    Reflected Cross-site Scripting in graphs_new.php in Cacti

    Cacti is an open source operational monitoring and fault management framework.Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability allows an authenticated user to poison data. The vulnerability is found in `graphs_new.php`. Sever…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2023-39366

    Stored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability allows an authenticated user to poison data stored in the _cacti_'s database. These data will be …

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2023-39510

    Stored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability allows an authenticated user to poison data stored in the _cacti_'s database. These data will be …

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2023-39511

    Stored Cross-Site-Scripting on reports_admin.php device name in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability which allows an authenticated user to poison data stored in the _cacti_'s database. These data wi…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2023-39512

    Stored Cross-site Scripting on data_sources.php device name view in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability which allows an authenticated user to poison data stored in the _cacti_'s database. These data wi…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2023-39513

    Stored Cross-site Scripting on host.php verbose data-query debug view in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability which allows an authenticated user to poison data stored in the _cacti_'s database. These data wi…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2023-39514

    Stored Cross-site Scripting on graphs.php data template formated name view in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability which allows an authenticated user to poison data stored in the _cacti_'s database. These data wi…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2023-39515

    Stored Cross-site Scripting on data_debug.php datasource path view in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be vi…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2023-39516

    Stored Cross-Site-Scripting on data_sources.php debug html-block in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability which allows an authenticated user to poison data stored in the _cacti_'s database. These data wi…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 4.6
    CVE-2023-39365

    Unchecked regular expressions can lead to SQL Injection and data leakage in Cacti

    Cacti is an open source operational monitoring and fault management framework. Issues with Cacti Regular Expression validation combined with the external links feature can lead to limited SQL Injections and subsequent data leakage. This issue has been address…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 4.3
    CVE-2023-30534 Scanner template

    Insecure Deserialization in Cacti

    Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. While a viable gadget chain exists in Cacti’s vendor directory (phpseclib), the necessary gadgets are n…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Low 3.5
    CVE-2023-39364

    Open redirect in change password functionality in Cacti

    Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, users with console access can be redirected to an arbitrary website after a change password performed via a specifically crafted URL. The `auth_changepassword.php`…

    Cacti cacti cacti cacti Debian Ubuntu Alpine

Revision history

  1. #11

    Neue Updates von Gentoo aufgenommen

  2. #10

    Neue Updates von Ubuntu aufgenommen

  3. #9

    Neue Updates von Debian aufgenommen

  4. #8

    Neue Updates von Debian aufgenommen

  5. #7

    Neue Updates von Debian aufgenommen

  6. #6

    Neue Updates von Amazon aufgenommen

  7. #5

    PoC für CVE-2023-39362 aufgenommen

  8. #4

    Neue Updates von Amazon aufgenommen

  9. #3

    Neue Updates von Fedora aufgenommen

  10. #2

    CVE ergänzt

  11. #1

    Initiale Fassung

References