cbcvebase.
CVE-2020-8497
published 2020-03-23

CVE-2020-8497: In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user names, user IDs…

PriorityP278medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
5.27%
91.5th percentile
In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user names, user IDs, private messages, and timestamps.

Affected

1 ranges
VendorProductVersion rangeFixed in
articapandora_fms<= 7.42—

Detection & IOCsextracted from sources · hover to see the quote

path/pandora_console/attachment/pandora_chat.log.json.txt↗
  • →HTTP GET request to the chat log path returns HTTP 200 with JSON body containing all four fields: '"type"', '"id_user"', '"user_name"', '"text"' ↗
  • →Shodan query to identify exposed Pandora FMS instances: http.title:"pandora fms" ↗
  • →FOFA query to identify exposed Pandora FMS instances: title="pandora fms" ↗
  • →Google dork to identify exposed Pandora FMS instances: intitle:"pandora fms" ↗
  • ·The vulnerability is unauthenticated — no credentials or session token are required to access the exposed chat log file. ↗
  • ·The exposed file is a static path under the pandora_console attachment directory; detection requires only a single HTTP GET request. ↗
  • ·Affected versions are Pandora FMS through 7.42 (CPE: cpe:2.3:a:artica:pandora_fms:*:*:*:*:*:*:*:*). ↗

CVSS provenance

nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vulncheck5.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.