Medium severity5.5NVD Advisory· Published Feb 22, 2017· Updated May 13, 2026
CVE-2017-6188
CVE-2017-6188
Description
Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET parameters allows overwriting any file accessible to the www-data user.
Affected products
2- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/munin-monitoring/munin/issues/721nvdIssue TrackingPatchThird Party Advisory
- www.securityfocus.com/bid/96399nvdThird Party AdvisoryVDB Entry
- bugs.debian.org/855705nvdIssue TrackingThird Party Advisory
- security.gentoo.org/glsa/201710-05nvdThird Party Advisory
- www.debian.org/security/2017/dsa-3794nvdThird Party Advisory
News mentions
0No linked articles in our index yet.