CVE-2023-41808CWE-269

Arbitrary File Read As Root Via GoTTY Page

High · published November 23, 2023

CVSS v3.1
8.5
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows an unauthorised user to escalate and read sensitive files as if they were root. This issue affects Pandora FMS: from 700 through 773.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00522 · 43.5th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2023-11-23T14:51Z
EPSS history
Timeline
  • 23 NOV 14:51Z
    Arbitrary File Read As Root Via GoTTY Page
    cvelistv5