CoreCVE
Back

MEDIUM

With an admin account, the .htaccess file in Artica Pandora FMS <=755 can be overwritten with the File Manager component

Published Nov 3, 2021

Description

With an admin account, the .htaccess file in Artica Pandora FMS <=755 can be overwritten with the File Manager component. The new .htaccess file contains a Rewrite Rule with a type definition. A normal PHP file can be uploaded with this new "file type" and the code can be executed with an HTTP request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-74

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 3, 2021
Updated Jul 9, 2026
Reserved Jul 12, 2021
Link CVE-2021-36697
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jul 9, 2026
Link CVE-2021-36697
Red Hat
Severity n/a
Public date n/a
Links CVE-2021-36697
ENISA EUVD
Assigner mitre
Published Nov 3, 2021
Updated Jul 9, 2026
Exploited since n/a
Link EUVD-2021-23292
EUVD-2021-23292