Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Tildeslash Ltd. Component: M/monit Clear all filters
TI-2020-19104 CVE-2020-36969 · GHSA-mwjm-9r99-f56x

M/Monit 3.7.4 - Privilege Escalation

Priority HIGH 73

M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00498 Published 2026-01-28 No fix listed CWE-863
TI-2020-19103 CVE-2020-36968 · GHSA-r4vc-qvp9-9h22

M/Monit 3.7.4 - Password Disclosure

Priority LOW 32

M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retrieve user password hashes through an administrative API endpoint.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00482 Published 2026-01-28 No fix listed CWE-522