Percona Monitoring Plugins

Introduce more secure location of PHP script configs to harden a Cacti setup (CVE-2014-2569)

Bug #1295006 reported by Roman Vynar
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Percona Monitoring Plugins
Fix Released
High
Unassigned
Percona Monitoring Plugins 1.1.3

Bug Description

/usr/share/cacti/scripts/ or /usr/share/cacti/site/scripts/ are not secure locations for the configs containing MySQL password. Let's allow for /etc/cacti/ as the better choice. Also let's add "Hardening Cacti Setup" guide.

Also to address CVE-2014-2569.

See original description
Tags: cacti security
Roman Vynar (roman-vynar)
Changed in percona-monitoring-plugins:
importance: Undecided → High
milestone: none → 1.1.3
tags: added: cacti security
Changed in percona-monitoring-plugins:
status: New → In Progress
Roman Vynar (roman-vynar)
Changed in percona-monitoring-plugins:
status: In Progress → Fix Released
summary: Introduce more secure location of PHP script configs to harden a Cacti
- setup
+ setup (CVE-2014-2569)
description: updated
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.