CVE-2017-12065

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.1.16

Description The issue allows remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter in the spikekill.php file.

Recommendations For versions prior to 1.1.16, update to version 1.1.16 or later to resolve the issue. As a temporary workaround, consider restricting access to the spikekill.php file until a patch is applied. Avoid using the avgnan, outlier-start, or outlier-end parameters in the affected file until the issue is resolved.