CVE-2018-16144 | BDVDB-2026-106534 Detail

Description#

The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command injection due to improper sanitization of the rancid_password parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://knowledge.opsview.com/v5.4/docs/whats-new
https://seclists.org/fulldisclosure/2018/Sep/3
https://www.coresecurity.com/advisories/opsview-monitor-multiple-vulnerabilities
https://knowledge.opsview.com/v5.3/docs/whats-new

Exploit#

No public exploit known

History#

Version 12018-09-05Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.