CVE-2024-35307

Summary

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through <777.

Affected Software

Weaknesses

• CWE-88: CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

References

• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

• ←Previous
• Next→