CVE-2023-41807 Linux Local Privilege Escalation Via GoTTY Page

What is CVE-2023-41807?

CVE-2023-41807 is a critical vulnerability in Artica Pandora Fms, published on 23 Nov 2023. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows a user to escalate permissions on the system shell. This issue affects Pandora FMS: from 700 through 773.

Weakness: CWE-269

Which versions are affected by CVE-2023-41807?

It affects 1 product.

Products include Artica Pandora Fms.

How do I fix CVE-2023-41807?

No fix has been published for CVE-2023-41807 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-41807 being exploited?

There is no known exploitation of CVE-2023-41807 in the wild and no public exploit code.

Other vulnerabilities in Artica Pandora Fms

• CVE-2010-4279 Auth bypass in n/a Critical 10.0
• CVE-2021-32098 Deserialization in n/a Critical 9.8
• CVE-2021-32099 SQL injection in n/a Critical 9.8
• CVE-2020-26518 SQL injection in n/a Critical 9.8
• CVE-2018-11221 File upload in n/a Critical 9.8

All Artica Pandora Fms vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5h3j-cm6x-qcr2.