CVE-2014-2327

Cross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack the authentication of users for unspecified commands, as demonstrated by requests that (1) modify binary files, (2) modify configurations, or (3) add arbitrary users.

• CWE-352

• http://jvn.jp/en/jp/JVN55076671/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002239.htmlThird Party Advisory, VDB Entry
• http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.htmlThird Party Advisory
• http://secunia.com/advisories/59203Third Party Advisory
• http://www.debian.org/security/2014/dsa-2970Third Party Advisory
• http://www.securityfocus.com/archive/1/531588Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/66392Third Party Advisory, VDB Entry
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742768Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/201509-03Third Party Advisory
• http://jvn.jp/en/jp/JVN55076671/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002239.htmlThird Party Advisory, VDB Entry
• http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.htmlThird Party Advisory
• http://secunia.com/advisories/59203Third Party Advisory
• http://www.debian.org/security/2014/dsa-2970Third Party Advisory
• http://www.securityfocus.com/archive/1/531588Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/66392Third Party Advisory, VDB Entry
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742768Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/201509-03Third Party Advisory

Published

Apr 23, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-2321web_shell_cmd.gch on ZTE F460 and F660 cable modems allows r…
• CVE-2014-2322lib/string_utf_support.rb in the Arabic Prawn 0.0.1 gem for …
• CVE-2014-2323SQL injection vulnerability in mod_mysql_vhost.c in lighttpd…9.8
• CVE-2014-2324Multiple directory traversal vulnerabilities in (1) mod_evho…
• CVE-2014-2325Multiple cross-site scripting (XSS) vulnerabilities in Proxm…
• CVE-2014-2326Cross-site scripting (XSS) vulnerability in cdef.php in Cact…
• CVE-2014-2328lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier al…
• CVE-2014-2329Multiple cross-site scripting (XSS) vulnerabilities in Check…
• CVE-2014-2330Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2014-2331Check_MK 1.2.2p2, 1.2.2p3, and 1.2.3i5 allows remote authent…
• CVE-2014-2332Check_MK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows rem…
• CVE-2014-2333Cross-site scripting (XSS) vulnerability in the Lazyest Gall…