CRITICAL🇵🇱 Wersja polska

CVE-2020-10788

CVSS 9.1v3.1pub. 2020-03-25upd. 2024-11-21

openITCOCKPIT before 3.7.3 uses the 1fea123e07f730f76e661bced33a94152378611e API key rather than generating a random API Key for WebSocket connections.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • It Novum Openitcockpit

    APP
    It-Novum
    < 3.7.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-10789CRITICAL9.8PL ✓same product

Command Injection w terminalu webowym openITCOCKPIT przed wersją 3.7.3

CVE-2019-15494CRITICAL9.8PL ✓same product

SSRF w openITCOCKPIT umożliwiający nieautoryzowany dostęp do zasobów wewnętrznych

CVE-2019-15490CRITICAL9.8PL ✓same product

Command Injection w openITCOCKPIT umożliwiający zdalne wykonanie kodu

CVE-2026-24893HIGH8.8same product

openITCOCKPIT is an open source monitoring tool built for different monitoring engines. openITCOCKPIT Communit...

CVE-2026-24891HIGH7.5same product

openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and...