Medium severity · published Jan 27, 2025
CVE-2024-45598
Cacti has a Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Path
4.9
CVSS
3.1%
EPSS
No
On KEV
Description
Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the `Poller Standard Error Log Path` parameter in either Installation Step 5 or in Configuration->Settings->Paths tab to a local file inside the server. Then simply going to Logs tab and selecting the name of the local file will show its content on the web UI. This vulnerability is fixed in 1.2.29.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
cacti · Cacti
< 1.2.29 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-45598
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-45598
Patch
https://github.com/Cacti/cacti/commit/eca52c6bb3e76c55d66b1040baa6dbf37471a0ae
Exploit
https://github.com/Cacti/cacti/security/advisories/GHSA-pv2c-97pp-vxwg
lists.debian.org
https://lists.debian.org/debian-lts-announce/2025/02/msg00010.html
More from cacti
9.8
CVE-2022-46169
Unauthenticated Command Injection
10.0
CVE-2024-29895
Cacti command injection in cmd_realtime.php
9.8
CVE-2026-40079
Cacti: Command Injection via escape_command() no-op in RRDtool execution
9.8
CVE-2026-39948
Cacti has SQL Injection via rfilter parameter in RLIKE clauses
9.8
CVE-2026-39955
Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php