CVE-2023-4677— Unauthenticated Admin Account Takeover Via Cron Log File Backups
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-4677
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Unauthenticated Admin Account Takeover Via Cron Log File Backups
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Console to scrape the cron logs directory for cron log backups. The contents of these log files can then be abused to authenticate to the application as an administrator. This issue affects Pandora FMS <= 772.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
认证机制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Artica Pandora FMS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Artica Pandora FMS是西班牙Artica公司的一套监控系统。该系统通过可视化的方式监控网络、服务器、虚拟基础架构和应用程序等。 Artica Pandora FMS 772版本及之前版本存在安全漏洞。攻击者利用该漏洞可以获取日志信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Pandora FMS | Pandora FMS | 700 ~ 772 | - |
II. Public POCs for CVE-2023-4677
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-4677
请登录查看更多情报信息。
- Pandora FMS Common Vulnerabilities and Exposuresvendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-4677
Same Patch Batch · Pandora FMS · 2023-11-23 · 14 CVEs total
| CVE-2023-41807 | 9.1 CRITICAL | Linux Local Privilege Escalation Via GoTTY Page |
| CVE-2023-41808 | 8.5 HIGH | Arbitrary File Read As Root Via GoTTY Page |
| CVE-2023-41791 | 8.4 HIGH | Lack of Authorization and Stored XSS Via Translation Abuse |
| CVE-2023-41806 | 8.2 HIGH | Misassignment of privileges can cause DOS attack |
| CVE-2023-41788 | 7.6 HIGH | Remote Code Execution via File Uploader |
| CVE-2023-41789 | 7.6 HIGH | Unauthenticated Admin Account Takeover Via XSS |
| CVE-2023-41790 | 7.6 HIGH | Traversal Path on PHP file |
| CVE-2023-41786 | 6.8 MEDIUM | Database backups availability by low-privileged users |
| CVE-2023-41787 | 6.0 MEDIUM | Arbitrary File Read |
| CVE-2023-41792 | 5.9 MEDIUM | Lack of Authorization and Stored XSS Via SNMP Trap Editor Page |
| CVE-2023-41812 | 5.7 MEDIUM | Uploading executables via the file manager |
| CVE-2023-41811 | 5.3 MEDIUM | Stored XSS Via Site News Page |
| CVE-2023-41810 | 4.0 MEDIUM | Stored XSS Via Dashboard Panel |
IV. Related Vulnerabilities
Same product: Pandora FMS
- CVE-2026-34188
OS Command Injection in Event Response Execution - CVE-2026-34186
SQL Injection in Custom Fields leads to Database Compromise - CVE-2026-30813
SQL Injection in Module Search leads to Database Compromise - CVE-2026-30812
Stored Cross-Site Scripting in Event Comments via Filter Byp - CVE-2026-30811
Missing Authorization in Configuration Ajax Endpoint leads t
Same vendor: Pandora FMS
- CVE-2026-34188
OS Command Injection in Event Response Execution - CVE-2026-34186
SQL Injection in Custom Fields leads to Database Compromise - CVE-2026-30813
SQL Injection in Module Search leads to Database Compromise - CVE-2026-30812
Stored Cross-Site Scripting in Event Comments via Filter Byp - CVE-2026-30811
Missing Authorization in Configuration Ajax Endpoint leads t
Same weakness: CWE-287
- CVE-2026-8244
Industrial Application Software IAS Canias ERP Login RMI imp - CVE-2026-8216
Industrial Application Software IAS Canias ERP Java RMI Sess - CVE-2026-8214
Industrial Application Software IAS Canias ERP RMI doAction - CVE-2026-42560
auth: Patreon provider assigns the same local user ID to eve - CVE-2026-41070
openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, all
V. Comments for CVE-2023-4677
No comments yet