CVE-2019-19681: Critical severity pandora fms vulnerability
DISPUTED Pandora FMS 7.x suffers from remote code execution vulnerability. With an authenticated user who can modify the alert system, it is possible to define and execute commands as root/Administrator. NOTE: The product vendor states that the vulnerability as it is described is not in fact an actual vulnerability. They state that to be able to create alert commands, you need to have admin rights. They also state that the extended ACL system can disable access to specific sections of the configuration, such as defining new alert commands.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-19681?
CVE-2019-19681 is a remote code execution vulnerability in Pandora FMS 7.x.
What is the severity of CVE-2019-19681?
CVE-2019-19681 has a severity rating of 8.8 (critical).
How does CVE-2019-19681 affect Pandora FMS?
CVE-2019-19681 allows an authenticated user to define and execute commands as root/Administrator through the alert system in Pandora FMS 7.x.
Which version of Pandora FMS is affected by CVE-2019-19681?
CVE-2019-19681 affects Pandora FMS version 7.0.
Is there a fix for CVE-2019-19681?
At the moment, there is no known fix for CVE-2019-19681. It is recommended to keep the software up to date and follow any security advisories from the vendor.