CVE-2022-0507

Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG version, up to OUM 759. This vulnerability could allow an attacker with authenticated IP to inject SQL.

Score

CVSS 3.1 8.8 High

Status

Modified - security@pandorafms.com

Published

2022-03-10

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Pandora Fms (Artica Pfms)
• Pandora Fms (Pandorafms)

References

• https://khoori.org/posts/cve-2022-0507/
• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
• https://www.incibe.es/en/cve-assignment-publication/coordinated-cves