CVE-2020-36969 | BDVDB-2026-312700 Detail

Description#

M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers can send a POST request to the /api/1/admin/users/update endpoint with a crafted payload to grant administrative access to a standard user account.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-01-28Record published in the CVE List.
2. Version 22026-03-05Most recent update recorded in the CVE List.