CVE-2010-4278: OS Command Injection
operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4278?
CVE-2010-4278 is classified as a high severity vulnerability due to its ability to allow remote authenticated users to execute arbitrary commands.
How do I fix CVE-2010-4278?
To fix CVE-2010-4278, update Pandora FMS to version 3.1.1 or later.
Which versions of Pandora FMS are affected by CVE-2010-4278?
CVE-2010-4278 affects Pandora FMS versions prior to 3.1.1, including 1.3 (all beta versions), 1.2, and 2.1.1.
What is the impact of CVE-2010-4278?
The impact of CVE-2010-4278 allows an attacker to execute arbitrary commands on the server through the networkmap.php script.
Is CVE-2010-4278 a remote code execution vulnerability?
Yes, CVE-2010-4278 is a remote code execution vulnerability that can be exploited by an authenticated user.