CVE-2022-43979 : There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v7

There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that the parameter that the user has inserted does not contain malicious characteres, but this check is insufficient. An attacker could insert an absolute path to overcome the heck, thus being able to incluse any PHP file that resides on the disk. The exploitation of this vulnerability could lead to a remote code execution.

Published 2023-01-27 22:15:09

Updated 2023-02-06 19:28:20

Source Spanish National Cybersecurity Institute, S.A. (INCIBE)

View at NVD, CVE.org

Vulnerability category: Directory traversalFile inclusionExecute code

Products affected by CVE-2022-43979

Pandorafms » Pandora Fms
Versions before (<) 766
cpe:2.3:a:pandorafms:pandora_fms:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2022-43979

EPSS FAQ

0.33%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 71 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-43979

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.9	MEDIUM	CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L	0.4	5.5	Spanish National Cybersecurity Institute, S.A. (INCIBE)
Attack Vector: Adjacent Network Attack Complexity: High Privileges Required: High User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: Low
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-43979

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Assigned by: nvd@nist.gov (Primary)
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Assigned by: cve-coordination@incibe.es (Secondary)

References for CVE-2022-43979

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

Pandora FMS Common Vulnerabilities and Exposures
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-43979

Products affected by CVE-2022-43979

Exploit prediction scoring system (EPSS) score for CVE-2022-43979

CVSS scores for CVE-2022-43979

CWE ids for CVE-2022-43979

References for CVE-2022-43979