ZDI-23-1500: Cacti graph_view SQL Injection Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication or escalate privileges on affected installations of Cacti. Authentication is required to exploit this vulnerability when the product is in its default configuration. The specific flaw exists within the graphview endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account.
Other sources
This vulnerability allows remote attackers to bypass authentication or escalate privileges on affected installations of Cacti. Authentication is required to exploit this vulnerability when the product is in its default configuration. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-39365.
Affected Software
Event History
Frequently Asked Questions
What is ZDI-23-1500?
ZDI-23-1500 is a Cacti graph_view SQL Injection Authentication Bypass Vulnerability.
What is the severity of ZDI-23-1500?
The severity of ZDI-23-1500 is high with a CVSS score of 8.8.
Who is affected by ZDI-23-1500?
Any installation of Cacti in its default configuration is affected by ZDI-23-1500.
How can ZDI-23-1500 be exploited?
ZDI-23-1500 can be exploited by remote attackers to bypass authentication or escalate privileges in affected installations of Cacti.
Is authentication required to exploit ZDI-23-1500?
Yes, authentication is required to exploit ZDI-23-1500 when Cacti is in its default configuration.