1. Home
  2. CVE Database
  3. CVE-2020-8497
MEDIUM · 5.3

CVE-2020-8497

In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user names, user IDs, private messages, and timestamps.

Vulnerability Description

In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user names, user IDs, private messages, and timestamps.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ArticaPandora Fms<= 7.42

Related Weaknesses (CWE)

CWE-306

References

FAQ

What is CVE-2020-8497?

CVE-2020-8497 is a vulnerability with a CVSS score of 5.3 (MEDIUM). In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user names, user IDs, private messages, and timestamps.

How severe is CVE-2020-8497?

CVE-2020-8497 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-8497?

Check the references section above for vendor advisories and patch information. Affected products include: Artica Pandora Fms.