Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-4342 (GCVE-0-2015-4342)
Vulnerability from cvelistv5 – Published: 2015-06-17 18:00 – Updated: 2024-08-06 06:11- n/a
| URL | Tags |
|---|---|
| https://bugzilla.suse.com/show_bug.cgi?id=934187 | x_refsource_CONFIRM |
| http://lists.opensuse.org/opensuse-updates/2015-0… | vendor-advisoryx_refsource_SUSE |
| http://lists.fedoraproject.org/pipermail/package-… | vendor-advisoryx_refsource_FEDORA |
| https://www.suse.com/security/cve/CVE-2015-4342.html | x_refsource_CONFIRM |
| http://packetstormsecurity.com/files/132224/Cacti… | x_refsource_MISC |
| http://www.cacti.net/release_notes_0_8_8d.php | x_refsource_CONFIRM |
| http://bugs.cacti.net/view.php?id=2571 | x_refsource_CONFIRM |
| http://www.securitytracker.com/id/1032672 | vdb-entryx_refsource_SECTRACK |
| http://lists.fedoraproject.org/pipermail/package-… | vendor-advisoryx_refsource_FEDORA |
| http://www.securityfocus.com/bid/75108 | vdb-entryx_refsource_BID |
| http://www.debian.org/security/2015/dsa-3295 | vendor-advisoryx_refsource_DEBIAN |
| http://seclists.org/fulldisclosure/2015/Jun/19 | mailing-listx_refsource_FULLDISC |
| http://lists.fedoraproject.org/pipermail/package-… | vendor-advisoryx_refsource_FEDORA |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T06:11:12.775Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.suse.com/show_bug.cgi?id=934187"
},
{
"name": "openSUSE-SU-2015:1133",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html"
},
{
"name": "FEDORA-2016-a8e2be0fe6",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.suse.com/security/cve/CVE-2015-4342.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.cacti.net/release_notes_0_8_8d.php"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://bugs.cacti.net/view.php?id=2571"
},
{
"name": "1032672",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032672"
},
{
"name": "FEDORA-2016-852a39e085",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html"
},
{
"name": "75108",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/75108"
},
{
"name": "DSA-3295",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3295"
},
{
"name": "20150609 [CVE-2015-4342]SQL Injection and Location header injection from cdef id",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2015/Jun/19"
},
{
"name": "FEDORA-2016-4a5ce6a6c0",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-06-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-11-07T21:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.suse.com/show_bug.cgi?id=934187"
},
{
"name": "openSUSE-SU-2015:1133",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html"
},
{
"name": "FEDORA-2016-a8e2be0fe6",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.suse.com/security/cve/CVE-2015-4342.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.cacti.net/release_notes_0_8_8d.php"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://bugs.cacti.net/view.php?id=2571"
},
{
"name": "1032672",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1032672"
},
{
"name": "FEDORA-2016-852a39e085",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html"
},
{
"name": "75108",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/75108"
},
{
"name": "DSA-3295",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2015/dsa-3295"
},
{
"name": "20150609 [CVE-2015-4342]SQL Injection and Location header injection from cdef id",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://seclists.org/fulldisclosure/2015/Jun/19"
},
{
"name": "FEDORA-2016-4a5ce6a6c0",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-4342",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.suse.com/show_bug.cgi?id=934187",
"refsource": "CONFIRM",
"url": "https://bugzilla.suse.com/show_bug.cgi?id=934187"
},
{
"name": "openSUSE-SU-2015:1133",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html"
},
{
"name": "FEDORA-2016-a8e2be0fe6",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html"
},
{
"name": "https://www.suse.com/security/cve/CVE-2015-4342.html",
"refsource": "CONFIRM",
"url": "https://www.suse.com/security/cve/CVE-2015-4342.html"
},
{
"name": "http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html"
},
{
"name": "http://www.cacti.net/release_notes_0_8_8d.php",
"refsource": "CONFIRM",
"url": "http://www.cacti.net/release_notes_0_8_8d.php"
},
{
"name": "http://bugs.cacti.net/view.php?id=2571",
"refsource": "CONFIRM",
"url": "http://bugs.cacti.net/view.php?id=2571"
},
{
"name": "1032672",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1032672"
},
{
"name": "FEDORA-2016-852a39e085",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html"
},
{
"name": "75108",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/75108"
},
{
"name": "DSA-3295",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2015/dsa-3295"
},
{
"name": "20150609 [CVE-2015-4342]SQL Injection and Location header injection from cdef id",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2015/Jun/19"
},
{
"name": "FEDORA-2016-4a5ce6a6c0",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2015-4342",
"datePublished": "2015-06-17T18:00:00.000Z",
"dateReserved": "2015-06-05T00:00:00.000Z",
"dateUpdated": "2024-08-06T06:11:12.775Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2015-4342",
"date": "2026-05-29",
"epss": "0.03761",
"percentile": "0.8823"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"0.8.8c\", \"matchCriteriaId\": \"4F676405-470D-43E8-A6EF-060E6E70F0FA\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"253C303A-E577-4488-93E6-68A8DD942C38\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id.\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de inyecci\\u00f3n SQL en Cacti anterior a 0.8.8d permite a atacantes remotos ejecutar comandos SQL arbitrarios a trav\\u00e9s de vectores no especificados que involucran un id cdef.\"}]",
"id": "CVE-2015-4342",
"lastModified": "2024-11-21T02:30:51.693",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2015-06-17T18:59:07.407",
"references": "[{\"url\": \"http://bugs.cacti.net/view.php?id=2571\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://seclists.org/fulldisclosure/2015/Jun/19\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.cacti.net/release_notes_0_8_8d.php\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3295\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/75108\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securitytracker.com/id/1032672\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://bugzilla.suse.com/show_bug.cgi?id=934187\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.suse.com/security/cve/CVE-2015-4342.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://bugs.cacti.net/view.php?id=2571\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://seclists.org/fulldisclosure/2015/Jun/19\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.cacti.net/release_notes_0_8_8d.php\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3295\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/75108\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id/1032672\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugzilla.suse.com/show_bug.cgi?id=934187\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.suse.com/security/cve/CVE-2015-4342.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-89\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2015-4342\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2015-06-17T18:59:07.407\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de inyecci\u00f3n SQL en Cacti anterior a 0.8.8d permite a atacantes remotos ejecutar comandos SQL arbitrarios a trav\u00e9s de vectores no especificados que involucran un id cdef.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-89\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"0.8.8c\",\"matchCriteriaId\":\"4F676405-470D-43E8-A6EF-060E6E70F0FA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"253C303A-E577-4488-93E6-68A8DD942C38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C\"}]}]}],\"references\":[{\"url\":\"http://bugs.cacti.net/view.php?id=2571\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://seclists.org/fulldisclosure/2015/Jun/19\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.cacti.net/release_notes_0_8_8d.php\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3295\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/75108\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securitytracker.com/id/1032672\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugzilla.suse.com/show_bug.cgi?id=934187\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.suse.com/security/cve/CVE-2015-4342.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://bugs.cacti.net/view.php?id=2571\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2015/Jun/19\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.cacti.net/release_notes_0_8_8d.php\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3295\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/75108\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1032672\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.suse.com/show_bug.cgi?id=934187\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.suse.com/security/cve/CVE-2015-4342.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
目前厂商已经发布了升级补丁以修复此安全问题,补丁获取链接: http://www.cacti.net/release_notes_0_8_8d.php
| Name | Cacti Cacti <0.8.8d |
|---|
{
"bids": {
"bid": {
"bidNumber": "75108"
}
},
"cves": {
"cve": {
"cveNumber": "CVE-2015-4342"
}
},
"description": "Cacti\u662fCacti\u96c6\u56e2\u7684\u4e00\u5957\u5f00\u6e90\u7684\u7f51\u7edc\u6d41\u91cf\u76d1\u6d4b\u548c\u5206\u6790\u5de5\u5177\u3002\u8be5\u5de5\u5177\u901a\u8fc7snmpget\u6765\u83b7\u53d6\u6570\u636e\uff0c\u4f7f\u7528RRDtool\u7ed8\u753b\u56fe\u5f62\u8fdb\u884c\u5206\u6790\uff0c\u5e76\u63d0\u4f9b\u6570\u636e\u548c\u7528\u6237\u7ba1\u7406\u529f\u80fd\u3002\r\n\r\nCacti 0.8.8d\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6ce8\u5165\u4efb\u610fSQL\u547d\u4ee4\u3002",
"discovererName": "unhex",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://www.cacti.net/release_notes_0_8_8d.php",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2015-03938",
"openTime": "2015-06-24",
"patchDescription": "Cacti\u662fCacti\u96c6\u56e2\u7684\u4e00\u5957\u5f00\u6e90\u7684\u7f51\u7edc\u6d41\u91cf\u76d1\u6d4b\u548c\u5206\u6790\u5de5\u5177\u3002\u8be5\u5de5\u5177\u901a\u8fc7snmpget\u6765\u83b7\u53d6\u6570\u636e\uff0c\u4f7f\u7528RRDtool\u7ed8\u753b\u56fe\u5f62\u8fdb\u884c\u5206\u6790\uff0c\u5e76\u63d0\u4f9b\u6570\u636e\u548c\u7528\u6237\u7ba1\u7406\u529f\u80fd\u3002Cacti 0.8.8d\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6ce8\u5165\u4efb\u610fSQL\u547d\u4ee4\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Cacti SQL\u6ce8\u5165\u6f0f\u6d1e\uff08CNVD-2015-03938\uff09\u7684\u8865\u4e01",
"products": {
"product": "Cacti Cacti \u003c0.8.8d"
},
"referenceLink": "http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html",
"serverity": "\u9ad8",
"submitTime": "2015-06-18",
"title": "Cacti SQL\u6ce8\u5165\u6f0f\u6d1e\uff08CNVD-2015-03938\uff09"
}
FKIE_CVE-2015-4342
Vulnerability from fkie_nvd - Published: 2015-06-17 18:59 - Updated: 2026-05-06 22:30| Vendor | Product | Version | |
|---|---|---|---|
| cacti | cacti | * | |
| fedoraproject | fedora | 22 | |
| fedoraproject | fedora | 23 | |
| fedoraproject | fedora | 24 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4F676405-470D-43E8-A6EF-060E6E70F0FA",
"versionEndIncluding": "0.8.8c",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",
"matchCriteriaId": "253C303A-E577-4488-93E6-68A8DD942C38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*",
"matchCriteriaId": "E79AB8DD-C907-4038-A931-1A5A4CFB6A5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",
"matchCriteriaId": "C729D5D1-ED95-443A-9F53-5D7C2FD9B80C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id."
},
{
"lang": "es",
"value": "Vulnerabilidad de inyecci\u00f3n SQL en Cacti anterior a 0.8.8d permite a atacantes remotos ejecutar comandos SQL arbitrarios a trav\u00e9s de vectores no especificados que involucran un id cdef."
}
],
"id": "CVE-2015-4342",
"lastModified": "2026-05-06T22:30:45.220",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2015-06-17T18:59:07.407",
"references": [
{
"source": "cve@mitre.org",
"url": "http://bugs.cacti.net/view.php?id=2571"
},
{
"source": "cve@mitre.org",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html"
},
{
"source": "cve@mitre.org",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html"
},
{
"source": "cve@mitre.org",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html"
},
{
"source": "cve@mitre.org",
"url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html"
},
{
"source": "cve@mitre.org",
"url": "http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html"
},
{
"source": "cve@mitre.org",
"url": "http://seclists.org/fulldisclosure/2015/Jun/19"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.cacti.net/release_notes_0_8_8d.php"
},
{
"source": "cve@mitre.org",
"url": "http://www.debian.org/security/2015/dsa-3295"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/75108"
},
{
"source": "cve@mitre.org",
"url": "http://www.securitytracker.com/id/1032672"
},
{
"source": "cve@mitre.org",
"url": "https://bugzilla.suse.com/show_bug.cgi?id=934187"
},
{
"source": "cve@mitre.org",
"url": "https://www.suse.com/security/cve/CVE-2015-4342.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://bugs.cacti.net/view.php?id=2571"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://seclists.org/fulldisclosure/2015/Jun/19"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.cacti.net/release_notes_0_8_8d.php"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2015/dsa-3295"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/75108"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id/1032672"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://bugzilla.suse.com/show_bug.cgi?id=934187"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.suse.com/security/cve/CVE-2015-4342.html"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-89"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-V774-W7W7-MVRG
Vulnerability from github – Published: 2022-05-17 00:25 – Updated: 2022-05-17 00:25SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id.
{
"affected": [],
"aliases": [
"CVE-2015-4342"
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2015-06-17T18:59:00Z",
"severity": "HIGH"
},
"details": "SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id.",
"id": "GHSA-v774-w7w7-mvrg",
"modified": "2022-05-17T00:25:45Z",
"published": "2022-05-17T00:25:45Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4342"
},
{
"type": "WEB",
"url": "https://bugzilla.suse.com/show_bug.cgi?id=934187"
},
{
"type": "WEB",
"url": "https://www.suse.com/security/cve/CVE-2015-4342.html"
},
{
"type": "WEB",
"url": "http://bugs.cacti.net/view.php?id=2571"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html"
},
{
"type": "WEB",
"url": "http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2015/Jun/19"
},
{
"type": "WEB",
"url": "http://www.cacti.net/release_notes_0_8_8d.php"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2015/dsa-3295"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/75108"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1032672"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2015-4342
Vulnerability from gsd - Updated: 2023-12-13 01:19{
"GSD": {
"alias": "CVE-2015-4342",
"description": "SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id.",
"id": "GSD-2015-4342",
"references": [
"https://www.suse.com/security/cve/CVE-2015-4342.html",
"https://www.debian.org/security/2015/dsa-3295",
"https://advisories.mageia.org/CVE-2015-4342.html",
"https://alas.aws.amazon.com/cve/html/CVE-2015-4342.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2015-4342"
],
"details": "SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id.",
"id": "GSD-2015-4342",
"modified": "2023-12-13T01:19:59.087025Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-4342",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.suse.com/show_bug.cgi?id=934187",
"refsource": "CONFIRM",
"url": "https://bugzilla.suse.com/show_bug.cgi?id=934187"
},
{
"name": "openSUSE-SU-2015:1133",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html"
},
{
"name": "FEDORA-2016-a8e2be0fe6",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html"
},
{
"name": "https://www.suse.com/security/cve/CVE-2015-4342.html",
"refsource": "CONFIRM",
"url": "https://www.suse.com/security/cve/CVE-2015-4342.html"
},
{
"name": "http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html"
},
{
"name": "http://www.cacti.net/release_notes_0_8_8d.php",
"refsource": "CONFIRM",
"url": "http://www.cacti.net/release_notes_0_8_8d.php"
},
{
"name": "http://bugs.cacti.net/view.php?id=2571",
"refsource": "CONFIRM",
"url": "http://bugs.cacti.net/view.php?id=2571"
},
{
"name": "1032672",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1032672"
},
{
"name": "FEDORA-2016-852a39e085",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html"
},
{
"name": "75108",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/75108"
},
{
"name": "DSA-3295",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2015/dsa-3295"
},
{
"name": "20150609 [CVE-2015-4342]SQL Injection and Location header injection from cdef id",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2015/Jun/19"
},
{
"name": "FEDORA-2016-4a5ce6a6c0",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "0.8.8c",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-4342"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.cacti.net/release_notes_0_8_8d.php",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.cacti.net/release_notes_0_8_8d.php"
},
{
"name": "http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html",
"refsource": "MISC",
"tags": [],
"url": "http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html"
},
{
"name": "20150609 [CVE-2015-4342]SQL Injection and Location header injection from cdef id",
"refsource": "FULLDISC",
"tags": [],
"url": "http://seclists.org/fulldisclosure/2015/Jun/19"
},
{
"name": "http://bugs.cacti.net/view.php?id=2571",
"refsource": "CONFIRM",
"tags": [],
"url": "http://bugs.cacti.net/view.php?id=2571"
},
{
"name": "FEDORA-2016-4a5ce6a6c0",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html"
},
{
"name": "FEDORA-2016-852a39e085",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html"
},
{
"name": "FEDORA-2016-a8e2be0fe6",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html"
},
{
"name": "75108",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/75108"
},
{
"name": "1032672",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id/1032672"
},
{
"name": "DSA-3295",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2015/dsa-3295"
},
{
"name": "https://www.suse.com/security/cve/CVE-2015-4342.html",
"refsource": "CONFIRM",
"tags": [],
"url": "https://www.suse.com/security/cve/CVE-2015-4342.html"
},
{
"name": "https://bugzilla.suse.com/show_bug.cgi?id=934187",
"refsource": "CONFIRM",
"tags": [],
"url": "https://bugzilla.suse.com/show_bug.cgi?id=934187"
},
{
"name": "openSUSE-SU-2015:1133",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2017-11-08T02:29Z",
"publishedDate": "2015-06-17T18:59Z"
}
}
}
OPENSUSE-SU-2024:10084-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "cacti-0.8.8h-1.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the cacti-0.8.8h-1.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10084",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10084-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-5588 page",
"url": "https://www.suse.com/security/cve/CVE-2013-5588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-5589 page",
"url": "https://www.suse.com/security/cve/CVE-2013-5589/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2326 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2326/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2327 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2327/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2328 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2328/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2708 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2709 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-4002 page",
"url": "https://www.suse.com/security/cve/CVE-2014-4002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-5025 page",
"url": "https://www.suse.com/security/cve/CVE-2014-5025/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-5026 page",
"url": "https://www.suse.com/security/cve/CVE-2014-5026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4342 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4342/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4634 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8369 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8377 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8377/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8604 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2313 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2313/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-3172 page",
"url": "https://www.suse.com/security/cve/CVE-2016-3172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-3659 page",
"url": "https://www.suse.com/security/cve/CVE-2016-3659/"
}
],
"title": "cacti-0.8.8h-1.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10084-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cacti-0.8.8h-1.2.aarch64",
"product": {
"name": "cacti-0.8.8h-1.2.aarch64",
"product_id": "cacti-0.8.8h-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "cacti-doc-0.8.8h-1.2.aarch64",
"product": {
"name": "cacti-doc-0.8.8h-1.2.aarch64",
"product_id": "cacti-doc-0.8.8h-1.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cacti-0.8.8h-1.2.ppc64le",
"product": {
"name": "cacti-0.8.8h-1.2.ppc64le",
"product_id": "cacti-0.8.8h-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "cacti-doc-0.8.8h-1.2.ppc64le",
"product": {
"name": "cacti-doc-0.8.8h-1.2.ppc64le",
"product_id": "cacti-doc-0.8.8h-1.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cacti-0.8.8h-1.2.s390x",
"product": {
"name": "cacti-0.8.8h-1.2.s390x",
"product_id": "cacti-0.8.8h-1.2.s390x"
}
},
{
"category": "product_version",
"name": "cacti-doc-0.8.8h-1.2.s390x",
"product": {
"name": "cacti-doc-0.8.8h-1.2.s390x",
"product_id": "cacti-doc-0.8.8h-1.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cacti-0.8.8h-1.2.x86_64",
"product": {
"name": "cacti-0.8.8h-1.2.x86_64",
"product_id": "cacti-0.8.8h-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "cacti-doc-0.8.8h-1.2.x86_64",
"product": {
"name": "cacti-doc-0.8.8h-1.2.x86_64",
"product_id": "cacti-doc-0.8.8h-1.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cacti-0.8.8h-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64"
},
"product_reference": "cacti-0.8.8h-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cacti-0.8.8h-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le"
},
"product_reference": "cacti-0.8.8h-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cacti-0.8.8h-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x"
},
"product_reference": "cacti-0.8.8h-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cacti-0.8.8h-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64"
},
"product_reference": "cacti-0.8.8h-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cacti-doc-0.8.8h-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64"
},
"product_reference": "cacti-doc-0.8.8h-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cacti-doc-0.8.8h-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le"
},
"product_reference": "cacti-doc-0.8.8h-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cacti-doc-0.8.8h-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x"
},
"product_reference": "cacti-doc-0.8.8h-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cacti-doc-0.8.8h-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
},
"product_reference": "cacti-doc-0.8.8h-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-5588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-5588"
}
],
"notes": [
{
"category": "general",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-5588",
"url": "https://www.suse.com/security/cve/CVE-2013-5588"
},
{
"category": "external",
"summary": "SUSE Bug 837440 for CVE-2013-5588",
"url": "https://bugzilla.suse.com/837440"
},
{
"category": "external",
"summary": "SUSE Bug 920399 for CVE-2013-5588",
"url": "https://bugzilla.suse.com/920399"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-5588"
},
{
"cve": "CVE-2013-5589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-5589"
}
],
"notes": [
{
"category": "general",
"text": "SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-5589",
"url": "https://www.suse.com/security/cve/CVE-2013-5589"
},
{
"category": "external",
"summary": "SUSE Bug 837440 for CVE-2013-5589",
"url": "https://bugzilla.suse.com/837440"
},
{
"category": "external",
"summary": "SUSE Bug 920399 for CVE-2013-5589",
"url": "https://bugzilla.suse.com/920399"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-5589"
},
{
"cve": "CVE-2014-2326",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2326"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2326",
"url": "https://www.suse.com/security/cve/CVE-2014-2326"
},
{
"category": "external",
"summary": "SUSE Bug 870821 for CVE-2014-2326",
"url": "https://bugzilla.suse.com/870821"
},
{
"category": "external",
"summary": "SUSE Bug 920399 for CVE-2014-2326",
"url": "https://bugzilla.suse.com/920399"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2326"
},
{
"cve": "CVE-2014-2327",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2327"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack the authentication of users for unspecified commands, as demonstrated by requests that (1) modify binary files, (2) modify configurations, or (3) add arbitrary users.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2327",
"url": "https://www.suse.com/security/cve/CVE-2014-2327"
},
{
"category": "external",
"summary": "SUSE Bug 920399 for CVE-2014-2327",
"url": "https://bugzilla.suse.com/920399"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2327"
},
{
"cve": "CVE-2014-2328",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2328"
}
],
"notes": [
{
"category": "general",
"text": "lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2328",
"url": "https://www.suse.com/security/cve/CVE-2014-2328"
},
{
"category": "external",
"summary": "SUSE Bug 920399 for CVE-2014-2328",
"url": "https://bugzilla.suse.com/920399"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2328"
},
{
"cve": "CVE-2014-2708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2708"
}
],
"notes": [
{
"category": "general",
"text": "Multiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the (1) graph_start, (2) graph_end, (3) graph_height, (4) graph_width, (5) graph_nolegend, (6) print_source, (7) local_graph_id, or (8) rra_id parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2708",
"url": "https://www.suse.com/security/cve/CVE-2014-2708"
},
{
"category": "external",
"summary": "SUSE Bug 872008 for CVE-2014-2708",
"url": "https://bugzilla.suse.com/872008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-2708"
},
{
"cve": "CVE-2014-2709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2709"
}
],
"notes": [
{
"category": "general",
"text": "lib/rrd.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified parameters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2709",
"url": "https://www.suse.com/security/cve/CVE-2014-2709"
},
{
"category": "external",
"summary": "SUSE Bug 872008 for CVE-2014-2709",
"url": "https://bugzilla.suse.com/872008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-2709"
},
{
"cve": "CVE-2014-4002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-4002"
}
],
"notes": [
{
"category": "general",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the (1) drp_action parameter to cdef.php, (2) data_input.php, (3) data_queries.php, (4) data_sources.php, (5) data_templates.php, (6) graph_templates.php, (7) graphs.php, (8) host.php, or (9) host_templates.php or the (10) graph_template_input_id or (11) graph_template_id parameter to graph_templates_inputs.php.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-4002",
"url": "https://www.suse.com/security/cve/CVE-2014-4002"
},
{
"category": "external",
"summary": "SUSE Bug 884326 for CVE-2014-4002",
"url": "https://bugzilla.suse.com/884326"
},
{
"category": "external",
"summary": "SUSE Bug 920399 for CVE-2014-4002",
"url": "https://bugzilla.suse.com/920399"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-4002"
},
{
"cve": "CVE-2014-5025",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-5025"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in data_sources.php in Cacti 0.8.8b allows remote authenticated users with console access to inject arbitrary web script or HTML via the name_cache parameter in a ds_edit action.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-5025",
"url": "https://www.suse.com/security/cve/CVE-2014-5025"
},
{
"category": "external",
"summary": "SUSE Bug 888686 for CVE-2014-5025",
"url": "https://bugzilla.suse.com/888686"
},
{
"category": "external",
"summary": "SUSE Bug 920399 for CVE-2014-5025",
"url": "https://bugzilla.suse.com/920399"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2014-5025"
},
{
"cve": "CVE-2014-5026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-5026"
}
],
"notes": [
{
"category": "general",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary web script or HTML via a (1) Graph Tree Title in a delete or (2) edit action; (3) CDEF Name, (4) Data Input Method Name, or (5) Host Templates Name in a delete action; (6) Data Source Title; (7) Graph Title; or (8) Graph Template Name in a delete or (9) duplicate action.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-5026",
"url": "https://www.suse.com/security/cve/CVE-2014-5026"
},
{
"category": "external",
"summary": "SUSE Bug 888686 for CVE-2014-5026",
"url": "https://bugzilla.suse.com/888686"
},
{
"category": "external",
"summary": "SUSE Bug 920399 for CVE-2014-5026",
"url": "https://bugzilla.suse.com/920399"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2014-5026"
},
{
"cve": "CVE-2015-4342",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4342"
}
],
"notes": [
{
"category": "general",
"text": "SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4342",
"url": "https://www.suse.com/security/cve/CVE-2015-4342"
},
{
"category": "external",
"summary": "SUSE Bug 934187 for CVE-2015-4342",
"url": "https://bugzilla.suse.com/934187"
},
{
"category": "external",
"summary": "SUSE Bug 935199 for CVE-2015-4342",
"url": "https://bugzilla.suse.com/935199"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-4342"
},
{
"cve": "CVE-2015-4634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4634"
}
],
"notes": [
{
"category": "general",
"text": "SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4634",
"url": "https://www.suse.com/security/cve/CVE-2015-4634"
},
{
"category": "external",
"summary": "SUSE Bug 937997 for CVE-2015-4634",
"url": "https://bugzilla.suse.com/937997"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-4634"
},
{
"cve": "CVE-2015-8369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8369"
}
],
"notes": [
{
"category": "general",
"text": "SQL injection vulnerability in include/top_graph_header.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rra_id parameter in a properties action to graph.php.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8369",
"url": "https://www.suse.com/security/cve/CVE-2015-8369"
},
{
"category": "external",
"summary": "SUSE Bug 958863 for CVE-2015-8369",
"url": "https://bugzilla.suse.com/958863"
},
{
"category": "external",
"summary": "SUSE Bug 958977 for CVE-2015-8369",
"url": "https://bugzilla.suse.com/958977"
},
{
"category": "external",
"summary": "SUSE Bug 960678 for CVE-2015-8369",
"url": "https://bugzilla.suse.com/960678"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-8369"
},
{
"cve": "CVE-2015-8377",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8377"
}
],
"notes": [
{
"category": "general",
"text": "SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selected_graphs_array parameter in a save action.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8377",
"url": "https://www.suse.com/security/cve/CVE-2015-8377"
},
{
"category": "external",
"summary": "SUSE Bug 958863 for CVE-2015-8377",
"url": "https://bugzilla.suse.com/958863"
},
{
"category": "external",
"summary": "SUSE Bug 958977 for CVE-2015-8377",
"url": "https://bugzilla.suse.com/958977"
},
{
"category": "external",
"summary": "SUSE Bug 960678 for CVE-2015-8377",
"url": "https://bugzilla.suse.com/960678"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8377"
},
{
"cve": "CVE-2015-8604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8604"
}
],
"notes": [
{
"category": "general",
"text": "SQL injection vulnerability in the host_new_graphs function in graphs_new.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via the cg_g parameter in a save action.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8604",
"url": "https://www.suse.com/security/cve/CVE-2015-8604"
},
{
"category": "external",
"summary": "SUSE Bug 960678 for CVE-2015-8604",
"url": "https://bugzilla.suse.com/960678"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-8604"
},
{
"cve": "CVE-2016-2313",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2313"
}
],
"notes": [
{
"category": "general",
"text": "auth_login.php in Cacti before 0.8.8g allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not in the cacti database.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2313",
"url": "https://www.suse.com/security/cve/CVE-2016-2313"
},
{
"category": "external",
"summary": "SUSE Bug 1022564 for CVE-2016-2313",
"url": "https://bugzilla.suse.com/1022564"
},
{
"category": "external",
"summary": "SUSE Bug 1069693 for CVE-2016-2313",
"url": "https://bugzilla.suse.com/1069693"
},
{
"category": "external",
"summary": "SUSE Bug 965930 for CVE-2016-2313",
"url": "https://bugzilla.suse.com/965930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-2313"
},
{
"cve": "CVE-2016-3172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-3172"
}
],
"notes": [
{
"category": "general",
"text": "SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parent_id parameter in an item_edit action.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-3172",
"url": "https://www.suse.com/security/cve/CVE-2016-3172"
},
{
"category": "external",
"summary": "SUSE Bug 971357 for CVE-2016-3172",
"url": "https://bugzilla.suse.com/971357"
},
{
"category": "external",
"summary": "SUSE Bug 974013 for CVE-2016-3172",
"url": "https://bugzilla.suse.com/974013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-3172"
},
{
"cve": "CVE-2016-3659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-3659"
}
],
"notes": [
{
"category": "general",
"text": "SQL injection vulnerability in graph_view.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQL commands via the host_group_data parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-3659",
"url": "https://www.suse.com/security/cve/CVE-2016-3659"
},
{
"category": "external",
"summary": "SUSE Bug 974013 for CVE-2016-3659",
"url": "https://bugzilla.suse.com/974013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-0.8.8h-1.2.x86_64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.aarch64",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.ppc64le",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.s390x",
"openSUSE Tumbleweed:cacti-doc-0.8.8h-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-3659"
}
]
}
VAR-201506-0385
Vulnerability from variot - Updated: 2023-12-18 12:20SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id. Cacti is an open source network traffic monitoring and analysis tool from Cacti Group. The tool uses snmpget to get data, RRDtool to draw graphics for analysis, and provides data and user management capabilities. Cacti is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Debian Security Advisory DSA-3295-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso June 24, 2015 https://www.debian.org/security/faq
Package : cacti CVE ID : CVE-2015-2665 CVE-2015-4342 CVE-2015-4454
Several vulnerabilities (cross-site scripting and SQL injection) have been discovered in Cacti, a web interface for graphing of monitoring systems.
For the oldstable distribution (wheezy), these problems have been fixed in version 0.8.8a+dfsg-5+deb7u5.
For the stable distribution (jessie), these problems have been fixed in version 0.8.8b+dfsg-8+deb8u1.
For the unstable distribution (sid), these problems have been fixed in version 0.8.8d+ds1-1.
We recommend that you upgrade your cacti packages.
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJVivszAAoJEAVMuPMTQ89Eq+sP/2jqe/IKVQwUxnJEY1w6hCRY S5kVRgGIW+e6WZnuIqTXWcELC+XhmOWv1F2McC7SJXclV7eMIlae/JwKb47XFVAX 1Nw1NlK+LZlbm23pqTv0ao8a0REhqkhMMENs/Ss1P2QFHxSCAqcoyXQ2wvTLwfXR 8Bm1qV12pHDd0TZG5gInNVncWL13sFIs8Fx0+psLyFa3yh2u5nbylVM2XNa3XTOn YtG4OnWkBrinpXtJ9S3XfF3JTUgMv0WLoK0ZD105GKJnxDWwsalDgFqkInGoYX6R oA/USy1LgX98s19tRKYhgadyl4FcUF62SR6arhPkLQdH3RX8uuZEs8/ozY6u4WSp 24Fsq4x+4M+9tUwNVwOgZ6+pCPkul3tSTfnxE7uao09JCQmD6QuEqbuJObEexnqz xm4JU3d0nXhLl7CGXdgMr4Cs4B+zRW/yCXyBQkbq72BhBPQE/70c1ze+sIdpCJI8 a3seNpa40kvEUQfxin7+itkfJhz2g1beRUsHclSTz8YrBD3iz79hnhlzJPte5H4z WDBXrNkxKnBQMTkhaTufT+NdnlkcxFPbr6HEW70Px/WNPsSca469NGyHy+u9QZM/ oM78VdKjP4AGKzBBY4HYplkbhRAgfF67Wdg0M5GZ8VRuh0knbogeau+srUTj16BO ZUkO3AskyvyalG1tCSsy =OST/ -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201506-0385",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "fedora",
"scope": "eq",
"trust": 1.6,
"vendor": "fedoraproject",
"version": "24"
},
{
"model": "fedora",
"scope": "eq",
"trust": 1.6,
"vendor": "fedoraproject",
"version": "22"
},
{
"model": "fedora",
"scope": "eq",
"trust": 1.6,
"vendor": "fedoraproject",
"version": "23"
},
{
"model": "cacti",
"scope": "lte",
"trust": 1.0,
"vendor": "cacti",
"version": "0.8.8c"
},
{
"model": "cacti",
"scope": "lt",
"trust": 0.8,
"vendor": "the cacti group",
"version": "0.8.8d"
},
{
"model": "\u003c0.8.8d",
"scope": null,
"trust": 0.6,
"vendor": "cacti",
"version": null
},
{
"model": "technology wsw-2401 h",
"scope": "eq",
"trust": 0.3,
"vendor": "planet",
"version": "0.8.6"
},
{
"model": "technology wsw-2401 g",
"scope": "eq",
"trust": 0.3,
"vendor": "planet",
"version": "0.8.6"
},
{
"model": "linux sparc",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "linux s/390",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "linux powerpc",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "linux mips",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "linux ia-64",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "linux ia-32",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "linux arm",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "linux amd64",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "cacti",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.8.7"
},
{
"model": "f",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.8.6"
},
{
"model": "c",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.8.6"
},
{
"model": "a",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.8.5"
},
{
"model": "cacti",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.8.5"
},
{
"model": "cacti",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.8.4"
},
{
"model": "a",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.8.3"
},
{
"model": "cacti",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.8.3"
},
{
"model": "a",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.8.2"
},
{
"model": "cacti",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.8.2"
},
{
"model": "cacti",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.8.1"
},
{
"model": "cacti",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.8"
},
{
"model": "cacti",
"scope": "eq",
"trust": 0.3,
"vendor": "cacti",
"version": "0.6.7"
},
{
"model": "0.8.7i",
"scope": null,
"trust": 0.3,
"vendor": "cacti",
"version": null
},
{
"model": "0.8.7h",
"scope": null,
"trust": 0.3,
"vendor": "cacti",
"version": null
},
{
"model": "0.8.7g",
"scope": null,
"trust": 0.3,
"vendor": "cacti",
"version": null
},
{
"model": "0.8.7f",
"scope": null,
"trust": 0.3,
"vendor": "cacti",
"version": null
},
{
"model": "0.8.7e",
"scope": null,
"trust": 0.3,
"vendor": "cacti",
"version": null
},
{
"model": "0.8.7d",
"scope": null,
"trust": 0.3,
"vendor": "cacti",
"version": null
},
{
"model": "0.8.7c",
"scope": null,
"trust": 0.3,
"vendor": "cacti",
"version": null
},
{
"model": "0.8.7b",
"scope": null,
"trust": 0.3,
"vendor": "cacti",
"version": null
},
{
"model": "0.8.7a",
"scope": null,
"trust": 0.3,
"vendor": "cacti",
"version": null
},
{
"model": "0.8.6k",
"scope": null,
"trust": 0.3,
"vendor": "cacti",
"version": null
},
{
"model": "0.8.6j",
"scope": null,
"trust": 0.3,
"vendor": "cacti",
"version": null
},
{
"model": "0.8.6i",
"scope": null,
"trust": 0.3,
"vendor": "cacti",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-03938"
},
{
"db": "BID",
"id": "75108"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003192"
},
{
"db": "NVD",
"id": "CVE-2015-4342"
},
{
"db": "CNNVD",
"id": "CNNVD-201506-324"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "0.8.8c",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2015-4342"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "unhex",
"sources": [
{
"db": "BID",
"id": "75108"
},
{
"db": "PACKETSTORM",
"id": "132224"
}
],
"trust": 0.4
},
"cve": "CVE-2015-4342",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 7.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2015-4342",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2015-03938",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2015-4342",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2015-03938",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201506-324",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-03938"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003192"
},
{
"db": "NVD",
"id": "CVE-2015-4342"
},
{
"db": "CNNVD",
"id": "CNNVD-201506-324"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id. Cacti is an open source network traffic monitoring and analysis tool from Cacti Group. The tool uses snmpget to get data, RRDtool to draw graphics for analysis, and provides data and user management capabilities. Cacti is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. \nExploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-3295-1 security@debian.org\nhttps://www.debian.org/security/ Salvatore Bonaccorso\nJune 24, 2015 https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage : cacti\nCVE ID : CVE-2015-2665 CVE-2015-4342 CVE-2015-4454\n\nSeveral vulnerabilities (cross-site scripting and SQL injection) have\nbeen discovered in Cacti, a web interface for graphing of monitoring\nsystems. \n\nFor the oldstable distribution (wheezy), these problems have been fixed\nin version 0.8.8a+dfsg-5+deb7u5. \n\nFor the stable distribution (jessie), these problems have been fixed in\nversion 0.8.8b+dfsg-8+deb8u1. \n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 0.8.8d+ds1-1. \n\nWe recommend that you upgrade your cacti packages. \n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\nZUkO3AskyvyalG1tCSsy\n=OST/\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-4342"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003192"
},
{
"db": "CNVD",
"id": "CNVD-2015-03938"
},
{
"db": "BID",
"id": "75108"
},
{
"db": "PACKETSTORM",
"id": "132429"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2015-4342",
"trust": 3.5
},
{
"db": "PACKETSTORM",
"id": "132224",
"trust": 3.1
},
{
"db": "BID",
"id": "75108",
"trust": 1.9
},
{
"db": "SECTRACK",
"id": "1032672",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003192",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2015-03938",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201506-324",
"trust": 0.6
},
{
"db": "PACKETSTORM",
"id": "132429",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-03938"
},
{
"db": "BID",
"id": "75108"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003192"
},
{
"db": "PACKETSTORM",
"id": "132224"
},
{
"db": "PACKETSTORM",
"id": "132429"
},
{
"db": "NVD",
"id": "CVE-2015-4342"
},
{
"db": "CNNVD",
"id": "CNNVD-201506-324"
}
]
},
"id": "VAR-201506-0385",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-03938"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-03938"
}
]
},
"last_update_date": "2023-12-18T12:20:48.083000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Release Notes - 0.8.8d",
"trust": 0.8,
"url": "http://www.cacti.net/release_notes_0_8_8d.php"
},
{
"title": "Bug Reporting",
"trust": 0.8,
"url": "http://bugs.cacti.net/main_page.php"
},
{
"title": "Patch for Cacti SQL Injection Vulnerability (CNVD-2015-03938)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/59936"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-03938"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003192"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-89",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-003192"
},
{
"db": "NVD",
"id": "CVE-2015-4342"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.0,
"url": "http://packetstormsecurity.com/files/132224/cacti-sql-injection-header-injection.html"
},
{
"trust": 1.9,
"url": "http://seclists.org/fulldisclosure/2015/jun/19"
},
{
"trust": 1.9,
"url": "http://www.cacti.net/release_notes_0_8_8d.php"
},
{
"trust": 1.7,
"url": "http://bugs.cacti.net/view.php?id=2571"
},
{
"trust": 1.0,
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-may/183449.html"
},
{
"trust": 1.0,
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-may/183454.html"
},
{
"trust": 1.0,
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-may/183919.html"
},
{
"trust": 1.0,
"url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html"
},
{
"trust": 1.0,
"url": "http://www.debian.org/security/2015/dsa-3295"
},
{
"trust": 1.0,
"url": "http://www.securityfocus.com/bid/75108"
},
{
"trust": 1.0,
"url": "http://www.securitytracker.com/id/1032672"
},
{
"trust": 1.0,
"url": "https://bugzilla.suse.com/show_bug.cgi?id=934187"
},
{
"trust": 1.0,
"url": "https://www.suse.com/security/cve/cve-2015-4342.html"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-4342"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-4342"
},
{
"trust": 0.3,
"url": "http://cacti.net/"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-4342"
},
{
"trust": 0.1,
"url": "http://bugs.cacti.net/view.php?id=2571#c6864"
},
{
"trust": 0.1,
"url": "http://www.dbappsecurity.com.cn/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-2665"
},
{
"trust": 0.1,
"url": "https://www.debian.org/security/faq"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-4454"
},
{
"trust": 0.1,
"url": "https://www.debian.org/security/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-03938"
},
{
"db": "BID",
"id": "75108"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003192"
},
{
"db": "PACKETSTORM",
"id": "132224"
},
{
"db": "PACKETSTORM",
"id": "132429"
},
{
"db": "NVD",
"id": "CVE-2015-4342"
},
{
"db": "CNNVD",
"id": "CNNVD-201506-324"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2015-03938"
},
{
"db": "BID",
"id": "75108"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003192"
},
{
"db": "PACKETSTORM",
"id": "132224"
},
{
"db": "PACKETSTORM",
"id": "132429"
},
{
"db": "NVD",
"id": "CVE-2015-4342"
},
{
"db": "CNNVD",
"id": "CNNVD-201506-324"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-06-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-03938"
},
{
"date": "2015-06-09T00:00:00",
"db": "BID",
"id": "75108"
},
{
"date": "2015-06-19T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-003192"
},
{
"date": "2015-06-09T17:22:22",
"db": "PACKETSTORM",
"id": "132224"
},
{
"date": "2015-06-25T02:36:27",
"db": "PACKETSTORM",
"id": "132429"
},
{
"date": "2015-06-17T18:59:07.407000",
"db": "NVD",
"id": "CVE-2015-4342"
},
{
"date": "2015-06-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201506-324"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-06-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-03938"
},
{
"date": "2015-07-14T23:45:00",
"db": "BID",
"id": "75108"
},
{
"date": "2015-06-19T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-003192"
},
{
"date": "2017-11-08T02:29:02.177000",
"db": "NVD",
"id": "CVE-2015-4342"
},
{
"date": "2015-06-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201506-324"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "132224"
},
{
"db": "CNNVD",
"id": "CNNVD-201506-324"
}
],
"trust": 0.7
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cacti In SQL Injection vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-003192"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "sql injection",
"sources": [
{
"db": "PACKETSTORM",
"id": "132224"
},
{
"db": "CNNVD",
"id": "CNNVD-201506-324"
}
],
"trust": 0.7
}
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.