CVE-2024-45598

Summary

CVE-2024-45598 is a vulnerability affecting the open source performance and fault management framework, Cacti, prior to version 1.2.29. This issue allows an administrator to modify the "Poller Standard Error Log Path" parameter to a local file, which can then be viewed on the web UI by accessing the Logs tab and selecting the name of the local file. This security flaw could potentially expose sensitive information to unauthorized users. The vulnerability is mitigated by upgrading to Cacti version 1.2.29.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.