What is CVE-2023-41806?

CVE-2023-41806 is a high-severity vulnerability in Artica Pandora Fms, classified under Improper Privilege Management. CVSS score: 8.2/10. Published 2023-11-23.

How severe is CVE-2023-41806?

High severity. CVSS v3 base score is 8.2 out of 10.

Privilege escalation in Artica Pandora Fms

CVE-2023-41806

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability causes that a bad privilege assignment could cause a DOS attack that affects the availability of the Pandora FMS server. This issue affects Pandora FMS: from 700 through 773.

Vulnerability class: Privilege Escalation

EPSS: 0.005 (38.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:H.

Affected products

Artica Pandora_fms
Pandora Fms — versions 700

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

security@pandorafms.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-41806?: CVE-2023-41806 is a high-severity vulnerability in Artica Pandora Fms, classified under Improper Privilege Management. CVSS score: 8.2/10. Published 2023-11-23.
How severe is CVE-2023-41806?: High severity. CVSS v3 base score is 8.2 out of 10.