CVE-2020-8813 PUBLISHED

graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.

EPSS 94.09% · 99.9th percentile

Risk Scores

EPSS Score
94.09%
99.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTScacti1.1.38+ds1-1ubuntu0.1~esm4, 1.1.27+ds1-3, 1.1.28+ds1-2
Ubuntu:Pro:14.04:LTScacti0.8.8b+dfsg-3, 0.8.8b+dfsg-5, 0.8.8b+dfsg-5ubuntu0.1

Timeline

References

Open in Interactive Console →