CVEvulnerability
CVE-2014-2327
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack the authentication of users for unspecified commands, as demonstrated by requests that (1) modify binary files, (2) modify configurations, or (3) add arbitrary users.
Affected configurations
• cacti cacti (>= 0.8.7 <= 0.8.7g)
• cacti cacti (>= 0.8.8 <= 0.8.8b)
• debian debian linux 7.0
• debian debian linux 8.0
• opensuse opensuse 13.1
• opensuse opensuse 13.2
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://jvn.jp/en/jp/JVN55076671/index.html Third Party Advisory, VDB Entry
- http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002239.html Third Party Advisory, VDB Entry
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html Third Party Advisory
- http://secunia.com/advisories/59203 Third Party Advisory
- http://www.debian.org/security/2014/dsa-2970 Third Party Advisory
- http://www.securityfocus.com/archive/1/531588 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/66392 Third Party Advisory, VDB Entry
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742768 Issue Tracking, Third Party Advisory
- https://security.gentoo.org/glsa/201509-03 Third Party Advisory
- http://jvn.jp/en/jp/JVN55076671/index.html Third Party Advisory, VDB Entry
- http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002239.html Third Party Advisory, VDB Entry
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html Third Party Advisory
- http://secunia.com/advisories/59203 Third Party Advisory
- http://www.debian.org/security/2014/dsa-2970 Third Party Advisory
- http://www.securityfocus.com/archive/1/531588 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/66392 Third Party Advisory, VDB Entry
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742768 Issue Tracking, Third Party Advisory
- https://security.gentoo.org/glsa/201509-03 Third Party Advisory