Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-6409.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tildeslash M/Monit 信任管理漏洞
Vulnerability Description
Tildeslash M/Monit是挪威Tildeslash公司的一套基于Unix系统的监控软件。该软件可对系统状态、进程、文件、目录和设备等进行监控。 Tildeslash M/Monit 3.3.2及之前版本中存在安全漏洞，该漏洞源于程序在更改密码前没有验证原密码。远程攻击者可借助‘fullname’和‘password’参数利用该漏洞修改其他用户密码，获取权限。
CVSS Information
N/A
Vulnerability Type
N/A