CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-12-05
Cacti remote_agent.php Authentication Bypass and Remote Code Execution (RCE) Vulnerability Analysis (CVE-2022-46169)
[Affected Scope] Cacti versions 1.2.x up to 1.2.22, and 1.3.x development branches
[Impact] Unauthenticated remote attackers can bypass authentication via HTTP header manipulation and execute arbitrary OS commands with the privileges of the web server
[Mitigation] Immediately upgrade Cacti to version 1.2.23 or later, and restrict access to the monitoring interface