CVE-2016-7067CWE-352

Monit before version 5.20.0 is vulnerable to a cross site request forgery attack

Medium · published September 10, 2018

CVSS v3.0
6.5
EPSS
1%
Percentile
58.5
In the wild
Unconfirmed
What it is

Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enable monitoring for a specific service.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00882 · 58.5th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2018-09-10T14:00Z
EPSS history
Timeline
  • 10 SEP 14:00Z
    Monit before version 5.20.0 is vulnerable to a cross site request forgery attack
    cvelistv5