Back to search
CVE-2002-1479
Published: Sep 1, 2004
Modified: Aug 8, 2024
PUBLISHED
Description
Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20020903 Cacti security issues
mailing-list
x_refsource_BUGTRAQ
cacti-config-world-readable(10049)
vdb-entry
x_refsource_XF
5628
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now