Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers can send a POST request to the /api/1/admin/users/update endpoint with a crafted payload to grant administrative access to a standard user account.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
M/Monit 3.7.4 has a privilege escalation flaw (CVE-2020-36969). Authenticated users can modify permissions. #MMonit #PrivilegeEscalation #infosec https://www.pulsepatch.io/posts/cve-2020-36969-mmonit-privilege-escalation
Post summary
M/Monit 3.7.4 has a CVE-2020‑36969 privilege escalation flaw that allows authenticated users to change permissions.
CVE-2020-36969 M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers … https://www.cve.org/CVERecord?id=CVE-2020-36969
Post summary
A concise disclosure of CVE‑2020‑36969, describing a privilege‑escalation vulnerability in Monit 3.7.4 that lets authenticated users alter user permissions via the admin parameter.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tildeslash | m\/monit | 3.7.4 | - | - |