Cacti 1.2.22 コマンドインジェクション (CVE-2022-46169)

critical Nessus プラグイン ID 173897

Language:

バージョン 1.25 Jul 17, 2024, 11:02 PM Logic Changes Plugin Feed: 202407172302
バージョン 1.23 Jun 5, 2024, 10:55 AM Required Scan configuration ("Enable cgi scanning" set to "True") Plugin Feed: 202406051055
バージョン 1.22 May 20, 2024, 10:13 AM Logic Changes Plugin Feed: 202405201013
バージョン 1.19 Mar 19, 2024, 6:40 PM Logic Changes (Improving logging to reduce disk space usage) Plugin Feed: 202403191840
バージョン 1.16 Feb 9, 2024, 11:22 AM New Plugin Feed: 202402091122
バージョン 1.13 Sep 26, 2023, 8:16 PM Logic Changes Plugin Feed: 202309262016
バージョン 1.12 Sep 7, 2023, 9:48 PM Plugin metadata (updated see_also) Plugin Feed: 202309072148
バージョン 1.11 Aug 28, 2023, 2:07 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202308281407
バージョン 1.10 Jul 17, 2023, 5:15 PM Logic Changes (Make torture_cgi library PCP clean and consolidate utf16_to_ascii()) Plugin Feed: 202307171715
バージョン 1.9 Jun 20, 2023, 9:07 PM Logic Changes (Temporarily limit debug logging) Plugin Feed: 202306202107
バージョン 1.7 Jun 1, 2023, 5:27 AM Logic Changes (Better logging) Plugin Feed: 202306010527
バージョン 1.5 May 1, 2023, 9:07 PM Detection (Make and use compatibility wrapper for running commands on scanner localhost to handle deprecation of pread().) Plugin Feed: 202305012107
バージョン 1.3 Apr 7, 2023, 10:11 AM Plugin metadata (spelling) Plugin Feed: 202304071011
バージョン 1.2 Apr 5, 2023, 6:07 PM CISA reference Plugin Feed: 202304051807
バージョン 1.1 Apr 5, 2023, 2:00 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C". "CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C". "CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploit available" set to "True". "Exploit available" set to "True". "Exploit available" set to "True". "Exploitability ease" set to "Exploits are available". "Exploit framework metasploit" set to "True". "Exploitability ease" set to "Exploits are available". "Exploit framework metasploit" set to "True". "Exploitability ease" set to "Exploits are available". "Exploit framework metasploit" set to "True") Plugin Feed: 202304051400
バージョン 1.0 Apr 5, 2023, 10:03 AM New Plugin Feed: 202304051003

* Changelogs are generally available for changes made after Nov 1, 2022