A SQL injection vulnerability in the Cacti platform allows an authenticated attacker to execute arbitrary database queries, potentially leading to unauthorized data access or modification.

The flaw exists in the sanitize_sql_column function (CWE-89), which fails to properly neutralize SQL commands, allowing an authenticated attacker to perform SQL injection attacks.

Successful exploitation permits an attacker to read, modify, or delete sensitive information stored within the Cacti database. Given the CVSS score of 8.8, this vulnerability poses a high risk to data integrity and confidentiality, which could lead to severe operational disruption or loss of administrative control.

Immediate Action: Monitor the Cacti project for an official security update and apply it immediately upon release.

Proactive Monitoring: Review database query logs for suspicious patterns or unauthorized SQL syntax, specifically originating from authenticated user sessions.

Compensating Controls: Use a Web Application Firewall to filter malicious SQL injection patterns and ensure database service accounts operate with the minimum necessary permissions.

Public Exploit Available: No

Administrators should treat this SQL injection vulnerability as a high priority. Until a patch is available, it is recommended to audit existing user accounts and limit access to the Cacti interface to trusted personnel only to reduce the attack surface.