CVE-2020-8497

In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user names, user IDs, private messages, and timestamps.

CVSS v3.1

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

5.27% chance of exploitation in the next 30 days, 92th percentile

Nuclei

medium · CWE-306

Published

2020-03-23

Updated

2024-08-04

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8497.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2020-8495
• CVE-2020-8504
• CVE-2020-8493
• CVE-2020-8505
• CVE-2020-8466
• CVE-2020-8506