CVE-2023-44090

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-44090
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows CVE-2008-5817. This vulnerability allowed SQL changes to be made to several files in the Grafana module. This issue affects Pandora FMS: from 700 through <776.

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 5.3

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact HIGH

Availability Impact LOW

Scope CHANGED

References
Link Resource
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
Configurations

No configuration.

History

21 Nov 2024, 08:25

Type Values Removed Values Added
Summary
  • (es) Neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de Comando SQL ('Inyección SQL') en Pandora FMS en todos permite CVE-2008-5817. Esta vulnerabilidad permitió realizar cambios de SQL en varios archivos del módulo Grafana. Este problema afecta a Pandora FMS: desde 700 hasta &lt;776.
References () https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - () https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ -

19 Mar 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-19 17:15

Updated : 2024-11-21 08:25

NVD link : CVE-2023-44090

Mitre link : CVE-2023-44090

CVE.ORG link : CVE-2023-44090

JSON object : View

Products Affected

No product.

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')