CVE-2020-13852: Malicious File Upload

Published Jun 11, 2020

Updated

Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.

Affected Software

1 affected component

PandoraFMS Pandora FMS=7.44

Event History

Jun 11, 2020

CVE Published

via MITRE·02:15 AM

Data Sourced

via MITRE·02:15 AM

Description

Frequently Asked Questions

What is CVE-2020-13852?

CVE-2020-13852 is a vulnerability in Artica Pandora FMS 7.44 that allows arbitrary file upload, which can lead to remote command execution.

How severe is CVE-2020-13852?

CVE-2020-13852 has a severity value of 7.2, which is classified as critical.

How does CVE-2020-13852 affect Pandora FMS?

CVE-2020-13852 affects Pandora FMS version 7.44, allowing an attacker to upload arbitrary files and potentially execute remote commands.

How can I fix CVE-2020-13852?

To fix CVE-2020-13852, it is recommended to update Artica Pandora FMS to a version that addresses the vulnerability or apply any patches or security fixes provided by the vendor.

Is there any additional information about CVE-2020-13852?

For more information about CVE-2020-13852, you can refer to the advisories published by Core Security at their website.