ZDI-CAN-20767: ZDI-23-1500: Cacti graph_view SQL Injection Authentication Bypass Vulnerability

Published Oct 4, 2023

Updated

This vulnerability allows remote attackers to bypass authentication or escalate privileges on affected installations of Cacti. Authentication is required to exploit this vulnerability when the product is in its default configuration. The specific flaw exists within the graphview endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account.

Other sources

This vulnerability allows remote attackers to bypass authentication or escalate privileges on affected installations of Cacti. Authentication is required to exploit this vulnerability when the product is in its default configuration. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-39365.

Affected Software

1 affected component

Cacti Cacti

Event History

Oct 4, 2023

Advisory Published

05:00 AM

Data Sourced

05:00 AM

Description

Jan 29, 2025

Advisory Published

06:51 AM

Frequently Asked Questions

What is the vulnerability ID for this Cacti vulnerability?

The vulnerability ID is ZDI-CAN-20767.

What is the severity of the ZDI-CAN-20767 vulnerability?

The severity of the vulnerability is high with a CVSS score of 8.8.

Which software is affected by the ZDI-CAN-20767 vulnerability?

The vulnerability affects Cacti software.

Is authentication required to exploit the ZDI-CAN-20767 vulnerability?

Yes, authentication is required to exploit this vulnerability when the product is in its default configuration.

Where can I find more information about the ZDI-CAN-20767 vulnerability?

You can find more information about the vulnerability at the following references: [http://www.zerodayinitiative.com/advisories/ZDI-23-1500/](http://www.zerodayinitiative.com/advisories/ZDI-23-1500/), [https://github.com/cacti/cacti/security/advisories/GHSA-v5w7-hww7-2f22](https://github.com/cacti/cacti/security/advisories/GHSA-v5w7-hww7-2f22), [https://www.zerodayinitiative.com/advisories/ZDI-23-1500/](https://www.zerodayinitiative.com/advisories/ZDI-23-1500/).