CVE-2023-44090

Summary

CVE-2023-44090 is a critical SQL injection vulnerability affecting Pandora FMS versions 700 through 776. This issue arises from improper handling of special elements in SQL commands, enabling attackers to make unauthorized modifications to several files within the Grafana module. SQL injection attacks can lead to unintended data access or changes, potentially compromising the security of the affected system. This vulnerability is a serious concern as it also allows the exploitation of an older vulnerability, CVE-2008-5817, which has already been addressed in newer versions of Pandora FMS. It is strongly recommended that affected organizations upgrade to a secure and patched version as soon as possible to minimize the risk of a successful attack.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.