CVE-2023-31132

Summary

CVE-2023-31132 is a privilege escalation vulnerability affecting versions of Cacti, an open source operational monitoring framework. A low-privileged OS user with access to a Windows host running Cacti can create and execute arbitrary PHP files in the web document directory, gaining SYSTEM-level privileges. Unaffected versions are 1.2.25 and above. Users are strongly advised to upgrade as soon as possible, as there are currently no known workarounds for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.