CVE-2016-7067 PUBLISHED

Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enable monitoring for a specific service.

EPSS 0.20% · 42.3th percentile

Risk Scores

EPSS Score
0.20%
42.3th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSmonit1:5.16-2, 1:5.15-1, 1:5.15-2
Ubuntu:14.04:LTSmonit1:5.5.1-1, 1:5.6-1, 1:5.6-2

Timeline

References

Open in Interactive Console →