PT-2017-14294
CVE-2017-15935
·
تاريخ النشر
2017-10-27
·
تاريخ التحديث
2017-11-14
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Artica Pandora FMS version 7.0
Description
The issue allows for remote PHP code execution through the manager files function. This can only be exploited by administrators who upload a PHP file.
Recommendations
For Artica Pandora FMS version 7.0, restrict access to the manager files function to prevent unauthorized PHP file uploads until a fix is available. As a temporary workaround, consider disabling the ability for administrators to upload PHP files through this function.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾