VDB
BDU%3A2025-01037
BDU%3A2025-01037
PUBLISHED
CVSS 6 MEDIUM
Уязвимость веб-интерфейса программного средства мониторинга сети Cacti, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 3.1
6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| The Cacti Group Inc. | Cacti | |
| Cacti | cacti | < 1.2.29 |
Timeline
- Jan 27, 2025 CVE Published
- Jan 27, 2025 PoC Published
- Jan 27, 2025 PoC Published
- Jan 27, 2025 PoC Published
- Aug 13, 2025 CVE Updated
References
- https://github.com/Cacti/cacti/security/advisories/GHSA-pv2c-97pp-vxwg url
- https://lists.debian.org/debian-lts-announce/2025/02/msg00010.html url
- https://github.com/Cacti/cacti/releases/tag/release%2F1.2.29 advisory
- https://github.com/Cacti/cacti/commit/eca52c6bb3e76c55d66b1040baa6dbf37471a0ae advisory