CVE-2024-11320 | THREATINT

Description

Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through <=777.4

Reserved 2024-11-18 | Published 2024-11-21 | Updated 2024-11-21 | Assigner PandoraFMS

MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:H/VA:L/SC:L/SI:L/SA:N/S:P/AU:N/R:U/V:C/RE:M/U:Amber

Problem types

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

Product status

Default status

unaffected

700

affected

Credits

Mohammad Askar <m.askar@isecur1ty.org> finder

References

pandorafms.com/...rity/common-vulnerabilities-and-exposures/

cve.org (CVE-2024-11320)

nvd.nist.gov (CVE-2024-11320)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.