Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote…
Priority MEDIUM 51CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.
Why it matters now
EPSS 0.19647 97th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 16
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:artica:pandora_fms:*:*:*:*:*:*:*:* | up to 3.1 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:1.3:*:*:*:*:*:*:* | 1.3 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:1.3:beta:*:*:*:*:*:* | 1.3 beta | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:1.3:beta1:*:*:*:*:*:* | 1.3 beta1 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:1.3:beta2:*:*:*:*:*:* | 1.3 beta2 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:1.3:beta3:*:*:*:*:*:* | 1.3 beta3 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:1.3.1:*:*:*:*:*:*:* | 1.3.1 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:2.0:beta:*:*:*:*:*:* | 2.0 beta | Vulnerable | Ártica |
- cpe:2.3:a:artica:pandora_fms:*:*:*:*:*:*:*:* Versions up to 3.1 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:1.3:beta:*:*:*:*:*:* Versions 1.3 beta Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:1.3:beta1:*:*:*:*:*:* Versions 1.3 beta1 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:1.3:beta2:*:*:*:*:*:* Versions 1.3 beta2 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:1.3:beta3:*:*:*:*:*:* Versions 1.3 beta3 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:2.0:beta:*:*:*:*:*:* Versions 2.0 beta Vulnerable ·Ártica
Show 6 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:artica:pandora_fms:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:2.1.1:*:*:*:*:*:*:* | 2.1.1 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:3.0:rc1:*:*:*:*:*:* | 3.0 rc1 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:3.0:rc2:*:*:*:*:*:* | 3.0 rc2 | Vulnerable | Ártica |
| cpe:2.3:a:artica:pandora_fms:3.1:rc1:*:*:*:*:*:* | 3.1 rc1 | Vulnerable | Ártica |
- cpe:2.3:a:artica:pandora_fms:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:3.0:rc1:*:*:*:*:*:* Versions 3.0 rc1 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:3.0:rc2:*:*:*:*:*:* Versions 3.0 rc2 Vulnerable ·Ártica
- cpe:2.3:a:artica:pandora_fms:3.1:rc1:*:*:*:*:*:* Versions 3.1 rc1 Vulnerable ·Ártica
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2010-4282
- 2026-10-03 Alias added: GHSA-j92f-xw2p-xfrr
References
More Ártica Pandora Fms vulnerabilities
- TI-2010-04028 The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for… CVSS 2.0HIGH 10.0
- TI-2024-12022 QuickShell Authenticated Command Injection CVSS 4.0HIGH 8.6
- TI-2019-14584 netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote… CVSS 3.1HIGH 8.8
- TI-2020-06822 In Artica Pandora FMS 7.42, Web Admin users can execute arbitrary code by uploading a… CVSS 3.1HIGH 7.2
- TI-2025-04766 Command Injection in Netflow path CVSS 4.0HIGH 7.0
- TI-2021-12051 A SQL injection vulnerability in the pandora_console component of Artica Pandora FMS 742… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2010-4282 · CVE Program
- CVE-2010-4282 · NVD
- FIRST EPSS
- GHSA-j92f-xw2p-xfrr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences