{
  "cveId": "CVE-2024-45598",
  "url": "https://patchblox.com/security/cve/CVE-2024-45598",
  "summary": "CVE-2024-45598 is fixed in cacti on 1 platform, first by DEBIAN-CVE-2024-45598, released January 27, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "cacti: Cacti is an open source performance and fault management framework",
  "description": "Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the \u0060Poller Standard Error Log Path\u0060 parameter in either Installation Step 5 or in Configuration-\u003ESettings-\u003EPaths tab to a local file inside the server. Then simply going to Logs tab and selecting the name of the local file will show its content on the web UI. This vulnerability is fixed in 1.2.29.",
  "published": "2025-01-27T16:15:31Z",
  "severity": "medium",
  "cvss": 4.9,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
  "epss": 0.02988,
  "epssPercentile": 0.87391,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "cacti",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1.2.24\u002Bds1-1\u002Bdeb12u5",
      "fix": "DEBIAN-CVE-2024-45598",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-45598",
      "released": "2025-01-27T16:15:31Z"
    },
    {
      "platform": "linux",
      "product": "cacti",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.2.28\u002Bds1-4",
      "fix": "DEBIAN-CVE-2024-45598",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-45598",
      "released": "2025-01-27T16:15:31Z"
    },
    {
      "platform": "linux",
      "product": "cacti",
      "release": "Debian 14",
      "fixedVersion": "1.2.28\u002Bds1-4",
      "fix": "DEBIAN-CVE-2024-45598",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-45598",
      "released": "2025-01-27T16:15:31Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}