A cross-site scripting (XSS) vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A cross-site scripting (XSS) vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of     escaping of unintended characters in the Website Hostname for Data Collectors. (CVE-2018-20724)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for cacti, cacti-spine to version 1.2.11 fixes the following issues :

This update is fixing multiple vulnerabilities and adding bug fixes.
For more details consult the changes file.

This update for cacti, cacti-spine fixes the following issues :

cacti-spine was updated to version 1.2.9.

Security issues fixed :

  - CVE-2009-4112: Fixed a privilege escalation     (bsc#1122535).

  - CVE-2018-20723: Fixed a cross-site scripting (XSS)     vulnerability (bsc#1122245).

  - CVE-2018-20724: Fixed a cross-site scripting (XSS)     vulnerability (bsc#1122244).

  - CVE-2018-20725: Fixed a privilege escalation that could     occur under certain conditions (bsc#1122535).

  - CVE-2018-20726: Fixed a cross-site scripting (XSS)     vulnerability (bsc#1122242).

  - CVE-2019-16723: Fixed an authentication bypass     vulnerability.

  - CVE-2019-17357: Fixed a SQL injection vulnerability     (bsc#1158990).

  - CVE-2019-17358: Fixed an unsafe deserialization in     sanitize_unserialize_selected_items (bsc#1158992).

  - CVE-2020-7106: Fixed a potential cross-site scripting     (XSS) vulnerability (bsc#1163749).

  - CVE-2020-7237: Fixed a remote code execution that     affected privileged users via shell metacharacters in     the Performance Boost Debug Log field (bsc#1161297).

Non-security issues fixed :

  - Fixed missing packages php-json, php-ctype, and php-gd     in cacti.spec (boo#1101024).

  - Fixed Apache2.4 and Apache2.2 runtime configuration     issue (boo#1101139).

ID	Name	Product	Family	Type	Severity
255125	Linux Distros Unpatched Vulnerability : CVE-2018-20724	Nessus	Misc.	Local	medium
136073	openSUSE Security Update : cacti / cacti-spine (openSUSE-2020-558)	Nessus	SuSE Local Security Checks	Local	high
134195	openSUSE Security Update : cacti / cacti-spine (openSUSE-2020-272)	Nessus	SuSE Local Security Checks	Local	high

Detections

Analytics

CVE-2018-20724

medium

Tenable Plugins

medium

high

high