CVE-2023-41808
Arbitrary File Read As Root Via GoTTY Page
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.5EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
23 Nov 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows an unauthorised user to escalate and read sensitive files as if they were root. This issue affects Pandora FMS: from 700 through 773.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Pandora FMS · Pandora FMSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →