Auth bypass in Artica Pandora Fms

CVE-2019-19681

Pandora FMS 7.x suffers from remote code execution vulnerability. With an authenticated user who can modify the alert system, it is possible to define and execute commands as root/Administrator. NOTE: The product vendor states that the vulnerability as it is described is not in fact an actual vulnerability. They state that to be able to create alert commands, you need to have admin rights. They also state that the extended ACL system can disable access to specific sections of the configuration, such as defining new alert commands

Vulnerability class: Broken Access Control

EPSS: 0.046 (90.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2019-19681?
CVE-2019-19681 is a high-severity vulnerability in Artica Pandora Fms, classified under Incorrect Authorization. CVSS score: 8.8/10. Published 2019-12-26.
How severe is CVE-2019-19681?
High severity. CVSS v3 base score is 8.8 out of 10.
Is CVE-2019-19681 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.