Vulnetix
Try Vulnetix Request Demo
CVE-2017-16661 REJECTED

Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as demonstrated by filename=passwd (with a Log Path under /etc) to read /etc/passwd.

EPSS 0.18% · 39.6th percentile

Risk Scores

EPSS Score
0.18%
39.6th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTScacti0, 1.1.18+ds1-1, 1.1.27+ds1-2

Timeline

References

Open in Interactive Console →