CVE-2022-26308 — Improper Access Control in Configuration (Credential store)
Pandora FMS v7.0NG.760 and below allows an improper access control in Configuration (Credential store) where a user with the role of Operator (Write) could create, delete, view …
Published: 2022-08-01 · CVSS: 3.7 · CVSS 3.1
Pandora FMS v7.0NG.760 and below allows an improper access control in Configuration (Credential store) where a user with the role of Operator (Write) could create, delete, view existing keys which are outside the intended role.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7