What is CVE-2022-26310?

CVE-2022-26310 is a high-severity vulnerability in Artica Pfms Pandora Fms, classified under Improper Authorization. CVSS score: 7.3/10. Published 2022-08-01.

How severe is CVE-2022-26310?

High severity. CVSS v3 base score is 7.3 out of 10.

Auth bypass in Artica Pfms Pandora Fms

CVE-2022-26310

Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with access to the User Management module could create, modify or delete any user with full admin privilege. The impact could…

EPSS: 0.006 (44.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N.

Affected products

Artica Pfms Pandora Fms — versions v760
Pandorafms Pandora_fms

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

security@pandorafms.com (x_refsource_CONFIRM, Vendor Advisory)
security@pandorafms.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2022-26310?: CVE-2022-26310 is a high-severity vulnerability in Artica Pfms Pandora Fms, classified under Improper Authorization. CVSS score: 7.3/10. Published 2022-08-01.
How severe is CVE-2022-26310?: High severity. CVSS v3 base score is 7.3 out of 10.