title: Misassignment of privileges can cause DOS attack
description: Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability causes that a bad privilege assignment could cause a DOS attack that affects the availability of the Pandora FMS server. This issue affects Pandora FMS: from 700 through 773.
problem types: CWE-269 Improper Privilege Management
affected:
{
defaultStatus: unaffected
platforms: all
product: Pandora FMS
vendor: Pandora FMS
versions:
lessThanOrEqual: 773, status: affected, version: 700, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Fixed in v774 and v772.2.