CVE-2023-44091: Unauth Time-Based SQL Injection
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. This ulnerability allowed SQL injections to be made even if authentication failed.This issue affects Pandora FMS: from 700 through <776.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-44091?
CVE-2023-44091 is considered a critical severity vulnerability due to its impact on SQL injection in Pandora FMS.
How do I fix CVE-2023-44091?
To fix CVE-2023-44091, update Pandora FMS to a version higher than 776 to eliminate the SQL injection vulnerability.
Which versions of Pandora FMS are affected by CVE-2023-44091?
CVE-2023-44091 affects all versions of Pandora FMS from 700 to 776.
What types of attacks can CVE-2023-44091 enable?
CVE-2023-44091 can enable unauthorized SQL injection attacks, potentially compromising the database and sensitive information.
Is authentication required to exploit CVE-2023-44091?
No, exploitation of CVE-2023-44091 can occur even if the user authentication fails.