CVE-2022-26308CWE-284

Improper Access Control in Configuration (Credential store)

Low · published August 1, 2022

CVSS v3.1
3.7
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

Pandora FMS v7.0NG.760 and below allows an improper access control in Configuration (Credential store) where a user with the role of Operator (Write) could create, delete, view existing keys which are outside the intended role.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-08-01T12:44Z
EPSS history
Timeline
  • 01 AUG 12:44Z
    Improper Access Control in Configuration (Credential store)
    cvelistv5