CVE-2004-1736

Fixed in a distro release EPSS 2%

Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message.

Published 2005-02-26 · CVE record · OSV

Products: the_cacti_group cacti

Distro releases