CVE-2019-19681
First published: Thu Dec 26 2019(Updated: )
** DISPUTED ** Pandora FMS 7.x suffers from remote code execution vulnerability. With an authenticated user who can modify the alert system, it is possible to define and execute commands as root/Administrator. NOTE: The product vendor states that the vulnerability as it is described is not in fact an actual vulnerability. They state that to be able to create alert commands, you need to have admin rights. They also state that the extended ACL system can disable access to specific sections of the configuration, such as defining new alert commands.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Artica Pandora FMS | =7.0 | |
| =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-19681?
CVE-2019-19681 is a remote code execution vulnerability in Pandora FMS 7.x.
What is the severity of CVE-2019-19681?
CVE-2019-19681 has a severity rating of 8.8 (critical).
How does CVE-2019-19681 affect Pandora FMS?
CVE-2019-19681 allows an authenticated user to define and execute commands as root/Administrator through the alert system in Pandora FMS 7.x.
Which version of Pandora FMS is affected by CVE-2019-19681?
CVE-2019-19681 affects Pandora FMS version 7.0.
Is there a fix for CVE-2019-19681?
At the moment, there is no known fix for CVE-2019-19681. It is recommended to keep the software up to date and follow any security advisories from the vendor.
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/status
- agent/softwarecombine
- agent/description
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- status/disputed
- vendor/artica
- canonical/artica pandora fms
- version/artica pandora fms/7.0