Skip to content
OpenAdvisories
High · 7.6 CVE-2023-41790 EUVD-2023-46282GHSA-83wp-743r-qp4g

Traversal Path on PHP file

Published Nov 23, 2023 · Updated Aug 2, 2024 · Assigned by PandoraFMS

Description

Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File Search Paths. This vulnerability allows to access the server configuration file and to compromise the database. This issue affects Pandora FMS: from 700 through 773.

Affected products

VendorProductAffectedFixed
Pandora FMS Pandora FMS 700 – ≤ 773 —

References