https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-12T03:18:45.448972+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-4677 CVE-2023-4677 — Unauthenticated Admin Account Takeover Via Cron Log File Backups 2026-10-12T03:18:45.602860+00:00

Affected: Pandora FMS

Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Console to scrape the cron logs directory for cron log backups. The contents of these log files can then be abused to authenticate to the application as an administrator. This issue affects Pandora FMS <= 772.