CVE-2018-16144 The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command injection due to improper sanitization of the rancid_password....
CriticalCVSS 9.8
EPSS 32.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command injection due to improper sanitization of the rancid_password parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opsview | < 5.3.1 | 5.3.1 |
| opsview | >= 5.4.0, < 5.4.2 | 5.4.2 |
References
- knowledge.opsview.com release-notes vendor-advisory
- knowledge.opsview.com release-notes vendor-advisory
- 20180904 [CORE-2018-0008] - Opsview Monitor Multiple Vulnerabilities exploit mailing-list third-party-advisory
- www.coresecurity.com exploit third-party-advisory