CVE-2021-3325

Katalog CVE

CVSS 9.8 · Critical EPSS 2,2%

Kerentanan pada fibranet monitorix, fedoraproject fedora. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an installation without a hosts_deny option). This issue occurred because a new access-control feature was introduced without considering that some exiting installations became unsafe, upon an update to 3.13.0, unless the new feature was immediately configured.

Rincian

Terbit di NVD

27 Januari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

2,2% peluang dieksploitasi; lebih tinggi dari 82,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.monitorix.org/news.html?n=20210127 release notes · advisory vendor
• https://github.com/mikaku/Monitorix/commit/d6816e20da1a98bcdc6372d9c36a093df5238f4a patch · advisory pihak ketiga
• https://github.com/mikaku/Monitorix/compare/v3.13.0...v3.13.1 patch · advisory pihak ketiga
• https://github.com/mikaku/Monitorix/issues/309 exploit · issue tracking · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67DDUU56LP76A...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGG6WK44CYY6G...