A CSRF vulnerability in Pandora FMS allows remote attackers to perform unauthorized actions on behalf of authenticated users, risking system configuration integrity.

This is a Cross-Site Request Forgery (CWE-352) vulnerability that allows an attacker to execute unauthorized commands or changes. The attack is unauthenticated but requires the victim to interact with a crafted malicious web page (UI:P).

Exploitation allows attackers to perform actions with the privileges of the victim, which could lead to unauthorized configuration changes or administrative actions within the Pandora FMS environment. The CVSS score of 8.8 reflects the high potential for impact on system integrity and unauthorized state changes.

Immediate Action: Update Pandora FMS to the patched versions v802 or v800.2 immediately.

Proactive Monitoring: Monitor application logs for unexpected administrative actions performed by users who did not initiate them.

Compensating Controls: Deploy a Web Application Firewall (WAF) with CSRF protection rules to inspect and block malicious requests that lack proper anti-forgery tokens.

Public Exploit Available: Unknown.

Organizations should prioritize the update to version 802 or 800.2 to neutralize this CSRF vector. Ensuring that administrative sessions are protected against unauthorized requests is critical for maintaining the security posture of the Pandora FMS deployment.