CVE-2020-14295
Published: 17 June 2020
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.
Priority
Status
Package | Release | Status |
---|---|---|
cacti Launchpad, Ubuntu, Debian |
bionic |
Released
(1.1.38+ds1-1ubuntu0.1~esm1)
Available with Ubuntu Pro |
eoan |
Ignored
(end of life)
|
|
focal |
Released
(1.2.10+ds1-1ubuntu1+esm1)
Available with Ubuntu Pro |
|
groovy |
Ignored
(end of life)
|
|
hirsute |
Not vulnerable
(1.2.16+ds1-2ubuntu1)
|
|
impish |
Not vulnerable
(1.2.16+ds1-2ubuntu1)
|
|
jammy |
Not vulnerable
(1.2.16+ds1-2ubuntu1)
|
|
kinetic |
Not vulnerable
(1.2.16+ds1-2ubuntu1)
|
|
lunar |
Not vulnerable
(1.2.16+ds1-2ubuntu1)
|
|
mantic |
Not vulnerable
(1.2.16+ds1-2ubuntu1)
|
|
trusty |
Needs triage
|
|
upstream |
Released
(1.2.13)
|
|
xenial |
Not vulnerable
(code not present)
|
|
Patches: upstream: https://github.com/Cacti/cacti/commit/cc1a656f37b08c0c45667c119a44a3751271ac6e |
Severity score breakdown
Parameter | Value |
---|---|
Base score | 7.2 |
Attack vector | Network |
Attack complexity | Low |
Privileges required | High |
User interaction | None |
Scope | Unchanged |
Confidentiality | High |
Integrity impact | High |
Availability impact | High |
Vector | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |