Medium severity4.9NVD Advisory· Published Nov 8, 2017· Updated Jun 17, 2026
CVE-2017-16661
CVE-2017-16661
Description
Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as demonstrated by filename=passwd (with a Log Path under /etc) to read /etc/passwd.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:cacti:cacti:1.1.27:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cacti:cacti:1.1.27:*:*:*:*:*:*:*
- (no CPE)range: <=1.1.27
Patches
Vulnerability mechanics
References
1- github.com/Cacti/cacti/issues/1066nvdExploitIssue TrackingPatch
News mentions
0No linked articles in our index yet.