cbcvebase.
CVE-2013-3500
published 2013-05-08

CVE-2013-3500: The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under…

PriorityP339high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.38%
81.8th percentile
The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under /usr/local/groundwork, which allows context-dependent attackers to bypass intended filesystem restrictions by leveraging access to a GroundWork script.

Affected

1 ranges
VendorProductVersion rangeFixed in
gwosgroundwork_monitor——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.