Critical severity9.8NVD Advisory· Published Jan 27, 2021· Updated Jun 17, 2026
CVE-2021-3325
CVE-2021-3325
Description
Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an installation without a hosts_deny option). This issue occurred because a new access-control feature was introduced without considering that some exiting installations became unsafe, upon an update to 3.13.0, unless the new feature was immediately configured.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Monitorix/Monitorixdescription
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- github.com/mikaku/Monitorix/commit/d6816e20da1a98bcdc6372d9c36a093df5238f4anvdPatchThird Party Advisory
- github.com/mikaku/Monitorix/compare/v3.13.0...v3.13.1nvdPatchThird Party Advisory
- github.com/mikaku/Monitorix/issues/309nvdExploitIssue TrackingThird Party Advisory
- www.monitorix.org/news.htmlnvdRelease NotesVendor Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67DDUU56LP76AJ2K7WJ733QPL2FHKKNG/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGG6WK44CYY6GEFRTCUEDANVNSX5NDH7/nvd
News mentions
0No linked articles in our index yet.