Read the docs

Mmonit

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mmonit records in CISA KEV

No Mmonit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
M/monit 2 records MEDIUM Monit 2 records LOW

Records

2 records in M/monit · all components

TI-2014-05455 CVE-2014-6607 · GHSA-3fgg-2gjx-mcfm

M/Monit 3.3.2 and earlier does not verify the original password before changing…

Priority MEDIUM 42

M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06647 Published 2014-10-06 No fix listed CWE-255
TI-2014-05265 CVE-2014-6409 · GHSA-8j2v-g6c3-rfrm

Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows…

Priority LOW 34

Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that change user passwords via the fullname and password pa…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02268 Published 2014-10-06 No fix listed CWE-352
Open these records in search →