CVE-2023-44092

CVSS V2 None CVSS V3 None

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Pandora FMS on all allows OS Command Injection. This vulnerability allowed to create a reverse shell and execute commands in the OS. This issue affects Pandora FMS: from 700 through <776.

Overview

CVE ID
CVE-2023-44092

Assigner
PandoraFMS

Vulnerability Status
PUBLISHED

Published Version
2024-03-19T16:32:54.633Z

Last Modified Date
2024-03-19T16:32:54.633Z

Weakness Enumerations

CWE	URL
CWE-78	http://cwe.mitre.org/data/definitions/78.html

References

Reference URL	Reference Tags
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-44092
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44092

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 12:31:03				Added to TrackCVE