CVE-2019-16723: Medium severity cacti vulnerability
In Cacti through 1.2.6, authenticated users may bypass authorization checks (for viewing a graph) via a direct graphjson.php request with a modified localgraphid parameter.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-16723?
The severity of CVE-2019-16723 is high with a severity value of 4.3.
How can authenticated users bypass authorization checks in Cacti through 1.2.6?
Authenticated users can bypass authorization checks in Cacti through 1.2.6 by making a direct graph_json.php request with a modified local_graph_id parameter.
Which versions of Cacti are affected by CVE-2019-16723?
Versions 1.2.2+ds1-2, 1.2.2+ds1-2+deb10u1, and 1.2.6+ds1-2 of Cacti are affected by CVE-2019-16723.
Are there any remedies available for CVE-2019-16723 in Cacti?
There are no specific remedies available for CVE-2019-16723 in Cacti.
Where can I find more information about CVE-2019-16723?
You can find more information about CVE-2019-16723 at the following references: [Reference 1](http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html), [Reference 2](http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html), [Reference 3](http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html).