CVE-2021-36697

With an admin account, the .htaccess file in Artica Pandora FMS <=755 can be overwritten with the File Manager component

published November 3, 2021

CVSS
—
EPSS
0%
Percentile
24.2
In the wild
Unconfirmed
What it is

With an admin account, the .htaccess file in Artica Pandora FMS <=755 can be overwritten with the File Manager component. The new .htaccess file contains a Rewrite Rule with a type definition. A normal PHP file can be uploaded with this new "file type" and the code can be executed with an HTTP request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00324 · 24.2th percentile
Published
2021-11-03T11:33Z
EPSS history
Timeline
  • 03 NOV 11:33Z
    With an admin account, the .htaccess file in Artica Pandora FMS <=755 can be overwritten with the File Manager component
    cvelistv5