CVE-2024-31460: Cacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in database

Published May 13, 2024
·
Updated

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in automationtreerules.php is not thoroughly checked and is used to concatenate the SQL statement in createallheadernodes() function from lib/apiautomation.php , finally resulting in SQL injection. Using SQL based secondary injection technology, attackers can modify the contents of the Cacti database, and based on the modified content, it may be possible to achieve further impact, such as arbitrary file reading, and even remote code execution through arbitrary file writing. Version 1.2.27 contains a patch for the issue.

Affected Software

12 affected componentsFixes available
Cacti Cacti<1.2.27
Fedoraproject Fedora=39
debian/cacti<1.2.24+ds1-1+deb12u3
1.2.24+ds1-1+deb12u3
debian/cacti<1.2.27+ds1-1
1.2.27+ds1-1
debian/cacti<1.2.27+ds1-1
1.2.27+ds1-1
debian/cacti
1.2.24+ds1-1+deb12u51.2.30+ds1-11.2.31+ds1-4
alpine/cacti<1.2.27-r0
1.2.27-r0
alpine/cacti<1.2.27-r0
1.2.27-r0
alpine/cacti<1.2.27-r0
1.2.27-r0
alpine/cacti<1.2.27-r0
1.2.27-r0
alpine/cacti<1.2.27-r0
1.2.27-r0
alpine/cacti<1.2.27-r0
1.2.27-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/cacti to a version that resolves this vulnerability.

    Fixed in 1.2.24+ds1-1+deb12u3
  2. Upgrade

    Upgrade debian/cacti to a version that resolves this vulnerability.

    Fixed in 1.2.27+ds1-1
  3. Upgrade

    Upgrade debian/cacti to a version that resolves this vulnerability.

    Fixed in 1.2.24+ds1-1+deb12u5Fixed in 1.2.30+ds1-1Fixed in 1.2.31+ds1-4
  4. Upgrade

    Upgrade alpine/cacti to a version that resolves this vulnerability.

    Fixed in 1.2.27-r0
  5. Upgrade

    Upgrade Cacti to a version that resolves this vulnerability.

    Fixed in 1.2.27

Event History

May 13, 2024
CVE Published
via MITRE·03:14 PM
Data Sourced
via MITRE·03:14 PM
DescriptionSeverityWeakness
May 14, 2024
Data Sourced
via NVD·03:25 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·03:25 PM
DescriptionSeverityAffected Software

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of CVE-2024-31460?

CVE-2024-31460 has been classified with a moderate severity level due to its potential impact on SQL injection vulnerabilities.

2

How do I fix CVE-2024-31460?

To remediate CVE-2024-31460, upgrade Cacti to version 1.2.27 or later.

3

Which versions of Cacti are affected by CVE-2024-31460?

CVE-2024-31460 affects Cacti versions prior to 1.2.27.

4

Is CVE-2024-31460 related to SQL injection vulnerabilities?

Yes, CVE-2024-31460 involves insufficient validation leading to potential SQL injection vulnerabilities.

5

What is the impact of CVE-2024-31460?

The impact of CVE-2024-31460 may allow an attacker to manipulate SQL queries, potentially leading to unauthorized data access.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203