CVEブラウザに戻る

CVE-2016-7067

MEDIUM

6.5

CVSS Severity Score

EPSS Score0.0180%

EPSS Percentile30.06th

Published2018年9月10日

Last Modified2024年11月21日

Vulnerability Description

Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enable monitoring for a specific service.

Affected Platforms (CPE)

📦

Mmonit

Monit

< 5.20.0

References & Advisories

🔗 http://www.securityfocus.com/bid/93953

🔗 https://bitbucket.org/tildeslash/monit/commits/c6ec3820e627f85417053e6336de2987f2d863e3?at=master

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7067

🔗 https://seclists.org/oss-sec/2016/q4/267

🔗 http://www.securityfocus.com/bid/93953

🔗 https://bitbucket.org/tildeslash/monit/commits/c6ec3820e627f85417053e6336de2987f2d863e3?at=master

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7067

🔗 https://seclists.org/oss-sec/2016/q4/267

関連する脆弱性情報

CVE-2004-189810.0

Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary ...

CVE-2003-108310.0

Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.

CVE-2019-114558.1

A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retriev...

CVE-2020-162587.1

Winston 1.5.4 devices make use of a Monit service (not managed during the normal user process) which is configured with default cr...