CNNVD-202601-4721 Information

CNNVD ID

CNNVD-202601-4721

CVE-2020-36968

  • CNNVD Published: 2026-01-28

Description (Chinese)

Tildeslash M/Monit是Tildeslash公司的一个服务器监控和管理工具。 Tildeslash M/Monit 3.7.4版本存在安全漏洞,该漏洞源于管理API端点存在身份验证漏洞,可能导致检索用户密码哈希。

Description (English)

Tildeslash M/Monit is a server monitoring and management tool for Tildeslash. There is a security loophole in version 3.7.4 of Tildeslash M/Monit, which stems from an identification gap in the management of the API endpoint, which may lead to a search of the user password Hashi.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Tildeslash

Published

2026-01-28

Last Modified

2026-02-24

References

https://mmonit.com/ https://www.exploit-db.com/exploits/49081 https://www.vulncheck.com/advisories/mmonit-password-disclosure

Patch

https://mmonit.com/download/

Share on: