Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Mmonit Component: M/monit Clear all filters
TI-2014-05455 CVE-2014-6607 · GHSA-3fgg-2gjx-mcfm

M/Monit 3.3.2 and earlier does not verify the original password before changing…

Priority MEDIUM 42

M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06647 Published 2014-10-06 No fix listed CWE-255
TI-2014-05265 CVE-2014-6409 · GHSA-8j2v-g6c3-rfrm

Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows…

Priority LOW 34

Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that change user passwords via the fullname and password pa…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02268 Published 2014-10-06 No fix listed CWE-352