Description (CNA)
Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained
- https://pandorafms.com/blog/whats-new-in-pandora-fms-743/
- https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack
ADP enrichment
No English description supplied.