CVE-2023-4677: Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Console to scrape the cron logs directory…

PriorityP349critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.49%

38.6th percentile

Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Console to scrape the cron logs directory for cron log backups. The contents of these log files can then be abused to authenticate to the application as an administrator. This issue affects Pandora FMS <= 772.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
artica	pandora_fms	>= 700 < 773	773
pandora_fms	pandora_fms	700 – 772	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.