Skip to content
OpenAdvisories
Medium · 5.8 CVE-2022-0507 EUVD-2022-15639GHSA-485w-jm59-qvxp

Vulnerability: Authenticated SQL Injection in API

Published Mar 9, 2022 · Updated Sep 16, 2024 · Assigned by ARTICA

Description

Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG version, up to OUM 759. This vulnerability could allow an attacker with authenticated IP to inject SQL.

Affected products

VendorProductAffectedFixed
Artica PFMS Pandora FMS v759 – < v759 v759

References