CVE-2004-1736

5 documents5 sources
Severity
5.0MEDIUM
EPSS
0.5%
top 35.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
THE Cacti Group Cacti
Timeline
PublishedDec 31
Latest updateApr 29

Description

Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶Debiancacti< 0.8.5a-5+3

🔴Vulnerability Details

3
GHSA
GHSA-8qpv-69qh-f6fm: Cacti 0↗2022-04-29
▶
CVEList
CVE-2004-1736: Cacti 0↗2005-02-26
▶
OSV
CVE-2004-1736: Cacti 0↗2004-12-31
▶

📋Vendor Advisories

1
Debian
CVE-2004-1736: cacti - Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP r...↗2004
▶