CVE-2024-35308
CVE-2024-35308
8.3
HighPublished:
Last updated:
Source:security@pandorafms.com
Analyzed
Weakness (CWE)
CVSS Vector
v4.0- Attack Vector
- Network
- Attack Complexity
- Low
- Attack Requirements
- None
- Privileges Required
- High
- User Interaction
- None
- Confidentiality (Vulnerable)
- High
- Integrity (Vulnerable)
- Low
- Availability (Vulnerable)
- None
- Confidentiality (Subsequent)
- High
- Integrity (Subsequent)
- Low
- Availability (Subsequent)
- None
Description
A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. This issue affects Pandora FMS: from 700 through <777.3.
References
security@pandorafms.com
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/