Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-6607. PoCs published by Dolev Farhi.
AI-analyzed exploit summary This is a CSRF exploit for M/Monit that allows an attacker to reset the password of any user account, including the admin, without knowing the current password. The PoC is a simple HTML form that submits a POST request to the vulnerable endpoint.
Description
M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-6409.
Exploits (1)
This is a CSRF exploit for M/Monit that allows an attacker to reset the password of any user account, including the admin, without knowing the current password. The PoC is a simple HTML form that submits a POST request to the vulnerable endpoint.