Pandora FMS Security Update Advisory (CVE-2024-11320)

Overview

 

An update has been released to address vulnerabilities in Pandora FMS. Users of the affected versions are advised to update to the latest version.
 

 

Affected Products

 

CVE-2024-11320

  • Pandora FMS versions: 700 (inclusive) ~ 777.5 (excluded)

 

 

Resolved Vulnerabilities

lDAP authentication mechanism command injection vulnerability that could allow arbitrary command execution on the server (CVE-2024-11320)

 

 

Vulnerability Patches

Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

CVE-2024-11320

  • Pandora FMS version: 777.5
     

 

Referenced Sites

 

[1] CVE-2024-11320 Detail

https://nvd.nist.gov/vuln/detail/CVE-2024-11320

[2] Common Vulnerabilities and Exposures (CVE®) is a list of common identifiers for publicly known cybersecurity vulnerabilities

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/