Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2022-26308

Improper Access Control in Configuration (Credential store)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ARTICA

Description

Pandora FMS v7.0NG.760 and below allows an improper access control in Configuration (Credential store) where a user with the role of Operator (Write) could create, delete, view existing keys which are outside the intended role.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Artica PFMS Pandora FMS

  • v760 to ≤ v760affected

References