CVE-2016-3659: SQL Injection
SQL injection vulnerability in graphview.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQL commands via the hostgroupdata parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3659?
CVE-2016-3659 is considered to have a medium severity due to its potential for unauthorized SQL command execution.
How do I fix CVE-2016-3659?
To fix CVE-2016-3659, upgrade to a version of Cacti higher than 0.8.8g, as the vulnerability has been addressed in later releases.
Who is affected by CVE-2016-3659?
CVE-2016-3659 affects remote authenticated users of Cacti 0.8.8.g, allowing them to exploit the SQL injection vulnerability.
What are the implications of CVE-2016-3659?
The implications of CVE-2016-3659 include the potential for attackers to execute arbitrary SQL commands, leading to data exposure or manipulation.
Is there a workaround for CVE-2016-3659?
A temporary workaround for CVE-2016-3659 is to restrict access to graph_view.php to trusted users until the software can be upgraded.