CVE-2023-41787

EUVD-2023-46279 · Published Nov 23, 2023

Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File Search Paths. This vulnerability allows access to files with sensitive information. This issue affects Pandora FMS: from 700 through 772.

Technologies

Artica Pandora Fms

Weaknesses

CWE-427

CVSS scores

v3.17.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Execution Stealth

T1190Exploit Public-Facing Application T1574.001DLL T1574.004Dylib Hijacking T1574.007Path Interception by PATH Environment Variable T1574.008Path Interception by Search Order Hijacking T1574.009Path Interception by Unquoted Path

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

Potentially impacted assets

See if this affects your attack surface