PT-2020-13732
CVE-2020-13852
·
Published
2020-06-11
·
Updated
2020-06-11
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Artica Pandora FMS version 7.44
Description
The issue allows for arbitrary file upload, which can lead to remote command execution. This is achieved via the File Manager feature.
Recommendations
For Artica Pandora FMS version 7.44, consider disabling the File Manager feature until a patch is available to prevent arbitrary file uploads and potential remote command execution.
Found an issue in the description? Have something to add? Feel free to write us 👾