SQL Injection Vulnerability in Artica Pandora FMS 742 Allows Login Bypass

CVE-2021-32099 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A SQL injection vulnerability in the pandora_console component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his unprivileged session via the /include/chart_generator.php session_id parameter, leading to a login bypass.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.