CVE-2016-7067 Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enab...
MediumCVSS 6.5
EPSS 0.88%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enable monitoring for a specific service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/monit(Debian:12) | < 1:5.20.0-1 | 1:5.20.0-1 |
| debian/monit(Debian:13) | < 1:5.20.0-1 | 1:5.20.0-1 |
| debian/monit(Debian:14) | < 1:5.20.0-1 | 1:5.20.0-1 |
| mmonit monit | < 5.20.0 | 5.20.0 |
| tildeslash monit | = 5.20.0 | No fix listed |
References
- Debian Security Tracker CVE-2016-7067 vendor-advisory
- 93953 third-party-advisory vdb-entry
- bitbucket.org exploit third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- [oss-security] 20161027 CVE-2016-7067 - CSRF in Monit Service Manager mailing-list third-party-advisory