Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-31460

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in `automation_tree_rules.php` is not thoroughly checked and is used to concatenate the SQL statement in `create_all_header_nodes()` function from `lib/api_automation.php` , finally resulting in SQL injection. Using SQL based secondary injection technology, attackers can modify the contents of the Cacti database, and based on the modified content, it may be possible to achieve further impact, such as arbitrary file reading, and even remote code execution through arbitrary file writing. Version 1.2.27 contains a patch for the issue.

Published

2024-05-14T15:25:26.897

Last Modified

2024-12-18T20:38:39.747

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Secondary
CWE-89
Type: Primary
CWE-89

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	cacti	cacti	< 1.2.27	Yes
Operating System	fedoraproject	fedora	39	Yes

References

https://github.com/Cacti/cacti/security/advisories/GHSA-cx8g-hvq8-p2rv Exploit, Vendor Advisory ([email protected])
https://github.com/Cacti/cacti/security/advisories/GHSA-gj3f-p326-gh8r Exploit, Vendor Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/[email protected]/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X/ Product ([email protected])
https://github.com/Cacti/cacti/security/advisories/GHSA-cx8g-hvq8-p2rv Exploit, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/Cacti/cacti/security/advisories/GHSA-gj3f-p326-gh8r Exploit, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X/ Product (af854a3a-2127-422b-91ae-364da2661108)