Upstream information

CVE-2024-34340 at MITRE

Description

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, Cacti calls `compat_password_hash` when users set their password. `compat_password_hash` use `password_hash` if there is it, else use `md5`. When verifying password, it calls `compat_password_verify`. In `compat_password_verify`, `password_verify` is called if there is it, else use `md5`. `password_verify` and `password_hash` are supported on PHP < 5.5.0, following PHP manual. The vulnerability is in `compat_password_verify`. Md5-hashed user input is compared with correct password in database by `$md5 == $hash`. It is a loose comparison, not `===`. It is a type juggling vulnerability. Version 1.2.27 contains a patch for the issue.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

SUSE Bugzilla entry: 1224241 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Package Hub 12
  • cacti >= 1.2.27-41.1
  • cacti-spine >= 1.2.27-35.1
 Patchnames:
openSUSE-2024-274
SUSE Package Hub 15 SP5
  • cacti >= 1.2.27-bp155.2.9.1
  • cacti-spine >= 1.2.27-bp155.2.9.1
 Patchnames:
openSUSE-2024-274
SUSE Package Hub 15 SP6
  • cacti >= 1.2.27-bp156.2.3.1
  • cacti-spine >= 1.2.27-bp156.2.3.1
 Patchnames:
openSUSE-2024-276
openSUSE Leap 15.5
  • cacti >= 1.2.27-bp155.2.9.1
  • cacti-spine >= 1.2.27-bp155.2.9.1
 Patchnames:
openSUSE-2024-274
openSUSE Leap 15.6
  • cacti >= 1.2.27-bp156.2.3.1
  • cacti-spine >= 1.2.27-bp156.2.3.1
 Patchnames:
openSUSE-2024-276
openSUSE Tumbleweed
  • cacti >= 1.2.27-1.1
 Patchnames:
openSUSE-Tumbleweed-2024-13962

SUSE Timeline for this CVE

CVE page created: Tue May 14 20:45:08 2024
CVE page last modified: Tue Sep 3 19:34:36 2024