CVE-2022-43978 in Pandora FMS
الملخص
بحسب MITRE • 28/01/2023
There is an improper authentication vulnerability in Pandora FMS v764. The application verifies that the user has a valid session when he is not trying to do a login. Since the secret is static in generatePublicHash function, an attacker with knowledge of a valid session can abuse this in order to pass the authentication check.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.