Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a privilege escalation vulnerability. A low-privileged OS user with access to a Windows host where Cacti is installed can create arbitrary PHP files in a web document directory. The user can then execute the PHP files under the security context of SYSTEM. This allows an attacker to escalate privilege from a normal user account to SYSTEM. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The remote host is affected by the vulnerability described in GLSA-202412-02 (Cacti: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-248dff7cbe advisory.

    Update cacti and cacti-spine to version 1.2.25.  This includes the upstream fixes for many CVEs.

    https://github.com/Cacti/cacti/releases/tag/release%2F1.2.25

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-06a2a6e03c advisory.

    Update cacti and cacti-spine to version 1.2.25.  This includes the upstream fixes for many CVEs.

    https://github.com/Cacti/cacti/releases/tag/release%2F1.2.25

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-6335ea9c0c advisory.

    Update cacti and cacti-spine to version 1.2.25.  This includes the upstream fixes for many CVEs.

    https://github.com/Cacti/cacti/releases/tag/release%2F1.2.25

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
212184	GLSA-202412-02 : Cacti: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
185293	Fedora 39 : cacti / cacti-spine (2023-248dff7cbe)	Nessus	Fedora Local Security Checks	critical
182999	Fedora 37 : cacti / cacti-spine (2023-06a2a6e03c)	Nessus	Fedora Local Security Checks	critical
182998	Fedora 38 : cacti / cacti-spine (2023-6335ea9c0c)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2023-31132

high

Tenable Plugins

critical

critical

critical

critical