CVE-2023-41786

Published Nov 23, 2023

Last updated 5 months ago

Overview

Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pandora FMS on all allows File Discovery. This vulnerability allows users with low privileges to download database backups. This issue affects Pandora FMS: from 700 through 772.
Source
security@pandorafms.com
NVD status
Modified

Risk scores

CVSS 3.1

Type
Primary
Base score
6.5
Impact score
3.6
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity
MEDIUM

Weaknesses

security@pandorafms.com
CWE-200
nvd@nist.gov
CWE-668

Social media

Hype score
Not currently trending

Configurations