Medium severity6.5NVD Advisory· Published Jan 28, 2026· Updated Jun 17, 2026
CVE-2020-36968
CVE-2020-36968
Description
M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retrieve user password hashes through an administrative API endpoint. Attackers can send requests to the /api/1/admin/users/list and /api/1/admin/users/get endpoints to extract MD5 password hashes for all users.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:tildeslash:m\/monit:3.7.4:*:*:*:*:*:*:*
- Tildeslash Ltd./M/Monitv5Range: 3.7.4
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/49081nvdExploitThird Party AdvisoryVDB Entry
- www.vulncheck.com/advisories/mmonit-password-disclosurenvdThird Party Advisory
- mmonit.comnvdProduct
News mentions
0No linked articles in our index yet.