Vulnerability in Gwos Groundwork Monitor
CVE-2013-3500
The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under /usr/local/groundwork, which allows context-dependent attackers to bypass intended filesystem restrictions by leveraging access to a GroundWork script.
EPSS: 0.024 (82.1th percentile) — read the EPSS interpretation.
Affected products
- Gwos Groundwork_monitor — versions 6.7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)