critical9.8
CVE-2021-32098
Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization.
Impact
Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Artica | Pandora Fms | Version 742 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained
- https://pandorafms.com/blog/whats-new-in-pandora-fms-743/
- https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack
- https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained
- https://pandorafms.com/blog/whats-new-in-pandora-fms-743/
- https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack