There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Cacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization of user-
    controlled data to populate arrays. An authenticated attacker could use this to influence object data
    values and control actions taken by Cacti or potentially cause memory corruption in the PHP module.
    (CVE-2019-17358)

  - Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php,
    lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the description
    parameter in data_sources.php (a raw string from the database that is displayed by $header to trigger the
    XSS). (CVE-2020-7106)

  - Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the Performance
    Boost Debug Log field of poller_automation.php. OS commands are executed when a new poller cycle begins.
    The attacker must be authenticated, and must have access to modify the Performance Settings of the
    product. (CVE-2020-7237)

  - graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell
    metacharacters in a cookie, if a guest user has the graph real-time privilege. (CVE-2020-8813)

The remote host is affected by the vulnerability described in GLSA-202003-40 (Cacti: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Cacti. Please review       the CVE identifiers referenced below for details.
  Impact :

    Remote attackers could execute arbitrary code or bypass intended access       restrictions.
  Workaround :

    There is no known workaround at this time.

This update for cacti, cacti-spine to version 1.2.11 fixes the following issues :

This update is fixing multiple vulnerabilities and adding bug fixes.
For more details consult the changes file.

The cacti developers reports :

When viewing graphs, some input variables are not properly checked (SQL injection possible).

Multiple instances of lib/functions.php are affected by unsafe deserialization of user-controlled data to populate arrays. An authenticated attacker could use this to influence object data values and control actions taken by Cacti or potentially cause memory corruption in the PHP module.

It was discovered that there was unsafe deserialisation issue in cacti, server monitoring system system.

Unsafe deserialisation of objects which can lead to abuse of the application logic, deny service or even execute arbitrary code.

For Debian 8 'Jessie', this issue has been fixed in cacti version 0.8.8b+dfsg-8+deb8u8.

We recommend that you upgrade your cacti packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for cacti, cacti-spine fixes the following issues :

cacti-spine was updated to version 1.2.9.

Security issues fixed :

  - CVE-2009-4112: Fixed a privilege escalation     (bsc#1122535).

  - CVE-2018-20723: Fixed a cross-site scripting (XSS)     vulnerability (bsc#1122245).

  - CVE-2018-20724: Fixed a cross-site scripting (XSS)     vulnerability (bsc#1122244).

  - CVE-2018-20725: Fixed a privilege escalation that could     occur under certain conditions (bsc#1122535).

  - CVE-2018-20726: Fixed a cross-site scripting (XSS)     vulnerability (bsc#1122242).

  - CVE-2019-16723: Fixed an authentication bypass     vulnerability.

  - CVE-2019-17357: Fixed a SQL injection vulnerability     (bsc#1158990).

  - CVE-2019-17358: Fixed an unsafe deserialization in     sanitize_unserialize_selected_items (bsc#1158992).

  - CVE-2020-7106: Fixed a potential cross-site scripting     (XSS) vulnerability (bsc#1163749).

  - CVE-2020-7237: Fixed a remote code execution that     affected privileged users via shell metacharacters in     the Performance Boost Debug Log field (bsc#1161297).

Non-security issues fixed :

  - Fixed missing packages php-json, php-ctype, and php-gd     in cacti.spec (boo#1101024).

  - Fixed Apache2.4 and Apache2.2 runtime configuration     issue (boo#1101139).

Multiple issues have been found in cacti, a server monitoring system, potentially resulting in SQL code execution or information disclosure by authenticated users.

  - CVE-2019-16723     Authenticated users may bypass authorization checks for     viewing a graph by submitting requests with modified     local_graph_id parameters.

  - CVE-2019-17357     The graph administration interface insufficiently     sanitizes the template_id parameter, potentially     resulting in SQL injection. This vulnerability might be     leveraged by authenticated attackers to perform     unauthorized SQL code execution on the database.

  - CVE-2019-17358     The sanitize_unserialize_selected_items function     (lib/functions.php) insufficiently sanitizes user input     before deserializing it, potentially resulting in unsafe     deserialization of user-controlled data. This     vulnerability might be leveraged by authenticated     attackers to influence the program control flow or cause     memory corruption.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Cacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization of user-     controlled data to populate arrays. An authenticated attacker could use this to influence object data     values and control actions taken by Cacti or potentially cause memory corruption in the PHP module.
    (CVE-2019-17358)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
403771	Alpine: multiple cacti packages: security update to 1.2.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
403771	Alpine: multiple cacti packages: security update to 1.2.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
134726	GLSA-202003-40 : Cacti: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	3/20/2020	3/21/2024	high
136073	openSUSE Security Update : cacti / cacti-spine (openSUSE-2020-558)	Nessus	SuSE Local Security Checks	4/29/2020	3/14/2024	high
132683	FreeBSD : cacti -- multiple vulnerabilities (86224a04-26de-11ea-97f2-001a8c5c04b6)	Nessus	FreeBSD Local Security Checks	1/7/2020	4/1/2024	high
131965	Debian DLA-2032-1 : cacti security update	Nessus	Debian Local Security Checks	12/12/2019	4/4/2024	high
134195	openSUSE Security Update : cacti / cacti-spine (openSUSE-2020-272)	Nessus	SuSE Local Security Checks	3/2/2020	3/25/2024	high
133107	Debian DSA-4604-1 : cacti - security update	Nessus	Debian Local Security Checks	1/21/2020	3/29/2024	high
256177	Linux Distros Unpatched Vulnerability : CVE-2019-17358	Nessus	Misc.	8/27/2025	7/26/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high