CVE-2017-16660 REJECTED

Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remote_agent.php request containing PHP code in a Client-ip header.

EPSS 1.46% · 80.7th percentile

Risk Scores

EPSS Score
1.46%
80.7th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTScacti0, 1.1.18+ds1-1, 1.1.27+ds1-2

Timeline

References

Open in Interactive Console →