critical9.8
CVE-2019-11393
An issue was discovered in /admin/users/update in M/Monit before 3.7.3.
Impact
An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by requesting a password change and specifying the admin parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tildeslash | Monit | before 3.7.3 |