Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2014-6409

Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that change user passwords via the fullname and password parameters to /admin/users/update.

CVSS 2.0 · 6.8 Medium EPSS 2.3% KEV · Not listed
Vendors
Mmonit
Products
M\/monit
CVE-2014-6607

M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-6409.

CVSS 2.0 · 7.5 High EPSS 6.6% KEV · Not listed
Vendors
Mmonit
Products
M\/monit