{"id":"CVE-2022-0730","aliases":["ALPINE-CVE-2022-0730","DEBIAN-CVE-2022-0730","DLA-2965-1","DLA-3252-1","DSA-5298-1","EUVD-2022-15799","GHSA-6g5w-jmg4-8qxf","UBUNTU-CVE-2022-0730","openSUSE-SU-2022:0145-1","openSUSE-SU-2024:12016-1"],"status":"published","title":"Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.","description":"Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.03499,"percentile":0.89263,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2022-03-03T00:00:00Z","modified":"2026-11-03T08:01:45Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"cacti","fixed_in":["1.2.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"cacti","fixed_in":["1.2.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"cacti","fixed_in":["1.2.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"cacti","fixed_in":["1.2.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"cacti","fixed_in":["1.2.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"cacti","fixed_in":["1.2.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"cacti","fixed_in":["1.2.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"cacti","fixed_in":["1.2.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"cacti","fixed_in":["1.2.20-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cacti","fixed_in":["1.2.20+ds1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cacti","fixed_in":["1.2.20+ds1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cacti","fixed_in":["1.2.20+ds1-1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12","package":"cacti","fixed_in":["1.2.20-bp153.2.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12","package":"cacti-spine","fixed_in":["1.2.20-bp153.2.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP3","package":"cacti","fixed_in":["1.2.20-bp153.2.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP3","package":"cacti-spine","fixed_in":["1.2.20-bp153.2.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"cacti","fixed_in":["1.2.20-bp153.2.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"cacti-spine","fixed_in":["1.2.20-bp153.2.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"cacti","fixed_in":["1.2.20-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.8h+ds1-10+deb9u2"}]}],"versions":["0.8.8h+ds1-10","0.8.8h+ds1-10+deb9u1"],"bundled":8},{"source":"osv","ecosystem":"Debian:10","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2+ds1-2+deb10u5"}]}],"versions":["1.2.2+ds1-2","1.2.2+ds1-2+deb10u1","1.2.2+ds1-2+deb10u2","1.2.2+ds1-2+deb10u3","1.2.2+ds1-2+deb10u4"],"bundled":5},{"source":"osv","ecosystem":"Debian:11","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.16+ds1-2+deb11u1"}]}],"versions":["1.2.16+ds1-2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.8b+dfsg-3","0.8.8b+dfsg-5","0.8.8b+dfsg-5ubuntu0.1","0.8.8b+dfsg-5ubuntu0.2","0.8.8b+dfsg-5ubuntu0.2+esm1","0.8.8b+dfsg-5ubuntu0.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.8f+ds1-2","0.8.8f+ds1-3","0.8.8f+ds1-4","0.8.8f+ds1-4ubuntu1","0.8.8f+ds1-4ubuntu2","0.8.8f+ds1-4ubuntu3","0.8.8f+ds1-4ubuntu4","0.8.8f+ds1-4ubuntu4.16.04","0.8.8f+ds1-4ubuntu4.16.04.1","0.8.8f+ds1-4ubuntu4.16.04.2","0.8.8f+ds1-4ubuntu4.16.04.2+esm1","0.8.8f+ds1-4ubuntu4.16.04.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.18+ds1-1","1.1.27+ds1-2","1.1.27+ds1-3","1.1.28+ds1-2","1.1.35+ds1-1","1.1.36+ds1-1","1.1.38+ds1-1","1.1.38+ds1-1ubuntu0.1~esm1","1.1.38+ds1-1ubuntu0.1~esm3","1.1.38+ds1-1ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.4+ds1-2ubuntu3","1.2.9+ds1-1ubuntu1","1.2.9+ds1-1ubuntu2","1.2.10+ds1-1ubuntu1","1.2.10+ds1-1ubuntu1+esm1","1.2.10+ds1-1ubuntu1.1","1.2.10+ds1-1ubuntu1.1+esm1","1.2.10+ds1-1ubuntu1.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.16+ds1-2ubuntu1","1.2.19+ds1-2ubuntu1","1.2.19+ds1-2ubuntu1+esm1","1.2.19+ds1-2ubuntu1.1","1.2.19+ds1-2ubuntu1.1+esm1","1.2.19+ds1-2ubuntu1.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.25+ds1-2","1.2.26+ds1-1","1.2.26+ds1-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.28+ds1-4ubuntu1","1.2.30+ds1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.30+ds1-1ubuntu2","1.2.30+ds1-1ubuntu3","1.2.31+ds1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.30+ds1-1ubuntu1","1.2.30+ds1-1ubuntu2"]},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-bp153.2.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-bp153.2.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-bp153.2.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-bp153.2.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-bp153.2.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-bp153.2.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-1.1"}]}]}],"products":[{"vendor":"cacti","product":"cacti"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/Cacti/cacti/issues/4562","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJERS4NYIGJUXEGT6ATUQA4CBYBRDLRA/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVOALVZSCBFNOAAZVHTJFSFB7UDSNYQ2/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZH67CCORDEYFG7NL7G6UH47PAV2PU7BA/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5298","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/12/msg00039.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0730","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RVOALVZSCBFNOAAZVHTJFSFB7UDSNYQ2/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJERS4NYIGJUXEGT6ATUQA4CBYBRDLRA/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZH67CCORDEYFG7NL7G6UH47PAV2PU7BA/"},{"url":"https://github.com/advisories/GHSA-6g5w-jmg4-8qxf"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-0730","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0730.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-0730","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-0730","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0730","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZEKTX6LOHELIEEVJYSONO5MX6DZOZIA/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1192408","tags":["report"]},{"url":"https://bugzilla.suse.com/1196692","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0730","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-0730","description":"Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.","status":"published","published":"2022-03-03T00:00:00Z","modified":"2024-08-02T23:40:03.539Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:34:41.69911Z"}],"euvd":[{"id":"EUVD-2022-15799","description":"Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.","status":"published","published":"2022-03-03T00:00:00Z","modified":"2024-08-02T23:40:03Z","updated_at":"2026-11-03T03:26:03.912978Z"}],"ghsa":[{"id":"GHSA-6g5w-jmg4-8qxf","title":"Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.","description":"Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.","status":"published","published":"2022-03-05T00:00:47Z","modified":"2023-02-13T00:31:18Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:54:05.462623Z"}],"nvd":[{"id":"CVE-2022-0730","description":"Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.","status":"published","published":"2022-03-03T23:15:08.253Z","modified":"2026-06-17T04:21:08.62Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:07:12.711288Z"}],"osv":[{"id":"ALPINE-CVE-2022-0730","description":"Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.","status":"published","published":"2022-03-03T23:15:08.253Z","modified":"2026-11-03T07:30:24.169020894Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"DEBIAN-CVE-2022-0730","description":"Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.","status":"published","published":"2022-03-03T23:15:08.253Z","modified":"2026-11-03T08:01:45.877444942Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"UBUNTU-CVE-2022-0730","description":"Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.","status":"published","published":"2022-03-03T23:15:00Z","modified":"2026-10-17T12:55:56.335397279Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"CVE-2022-0730","description":"Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.","status":"published","published":"2022-03-03T00:00:00Z","modified":"2026-10-28T02:30:42.47012948Z","cwes":["CWE-287"],"updated_at":"2026-11-02T15:44:22.824781Z"},{"id":"DLA-2965-1","title":"cacti - security update","status":"published","published":"2022-03-29T00:00:00Z","modified":"2026-03-09T01:18:05.251587Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3252-1","title":"cacti - security update","status":"published","published":"2022-12-31T00:00:00Z","modified":"2026-03-09T01:20:41.230061Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5298-1","title":"cacti - security update","status":"published","published":"2022-12-09T00:00:00Z","modified":"2026-03-09T02:11:35.239101Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2022:0145-1","title":"Security update for cacti, cacti-spine","description":"This update for cacti, cacti-spine fixes the following issues:\n\ncacti-spine was updated to 1.2.20:\n\n  * Add support for newer versions of MySQL/MariaDB\n  * When checking for uptime of device, don't assume a non-response\n    is always fatal\n  * Fix description and command trunctation issues\n  * Improve spine performance when only one snmp agent port is in\n    use\n\ncacti-spine 1.2.19:\n\n  * Fix 1ssues with polling loop may skip some datasources\n  * Fix ping no longer works due to hostname changes\n  * Fix RRD steps are not always calculated correctly\n  * Fix unable to build when DES no longer supported\n  * Fix IPv6 devices are not properly parsed\n  * Reduce a number of compiler warnings\n  * Fix compiler warnings due to lack of return in thread_mutex_trylock\n  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows\n  * Improve performance of Cacti poller on heavily loaded systems\n\ncacti-spine 1.2.20:\n\n  * Add support for newer versions of MySQL/MariaDB\n  * When checking for uptime of device, don't assume a non-response\n    is always fatal\n  * Fix description and command trunctation issues\n  * Improve spine performance when only one snmp agent port is in\n    use\n\ncacti was updated to 1.2.20:\n\n  * Security fix for CVE-2022-0730, boo#1196692\n    Under certain ldap conditions, Cacti authentication can be\n    bypassed with certain credential types.\n  * Security fix: Device, Graph, Graph Template,\n    and Graph Items may be vulnerable to XSS issues\n  * Security fix: Lockout policies are not properly applied to LDAP\n    and Domain Users\n  * Security fix: When using 'remember me' option, incorrect realm\n    may be selected\n  * Security fix: User and Group maintenance are vulnerable to SQL attacks\n  * Security fix: Color Templates are vulnerable to XSS attack\n  * Features:\n    * When creating a Data Source Profile, allow additional choices for Heartbeat\n    * Change select all options to use Font Awesome icons\n    * Improve spine performance by storing the total number of system snmp_ports in use\n    * Prevent Template User Accounts from being Removed\n    * When managing by users, allow filtering by Realm\n    * Allow plugins to supply template account names\n    * When viewing logs, additional message types should be filterable\n    * When creating a Graph Template Item, allow filtering by Data Template\n    * Allow language handler to be selected via UI\n    * Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco\n    * Add Advanced Ping Graph Template to initial Installable templates\n    * Add LDAP Debug Mode option\n    * Allow Reports to include devices not on a Tree\n    * Allow Basic Authentication to display custom failure message\n  * Fix: When replicating data during installation/upgrade,\n    system may appear to hang\n  * Fix: Graph Template Items may have duplicated entries\n  * Fix: Unable to Save Graph Settings\n  * Fix: Script Server may crash if an OID is missing or unavailable\n  * Fix: When system-wide polling is disabled,\n    remote pollers may fail to sync changed settings\n  * Fix: When updating poller name, duplicate name protection may be over zealous\n  * Fix: Titles may show 'Missing Datasource' incorectly\n  * Fix: Checking for MIB Cache can cause crashes\n  * Fix: Polling cycles may not always complete as expected\n  * Fix: When viewing graph data, non-numeric values may appear\n  * Fix: Utilities view has calculation errors when there are no data sources\n  * Fix: When editing Reports, drag and drop may not function as intended\n  * Fix: When data drive is full, viewing a Graph can result in errors\n  * Various other bug fixes\n\ncacti 1.2.19:\n\n  * Further fixes for grave character security protection (boo#1192408)\n  * Fix Over aggressive escaping causing menu visibility issues on Create Device page\n  * Add SHA256 and AES256 security levels for SNMP polling\n  * Import graph template(Preview Only) show color_id new value as a blank area\n  * Fix Editing graphs errors due to missing sequence\n  * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen\n  * Fix 2hen RealTime is not active, console errors may appear\n  * Fix race conditions may occur when multiple RRDtool processes are running\n  * Fix errors creating graphs from templates\n  * Fix errors when duplicating reports\n  * Fix Boost may be blocked by overflowing poller_output table\n  * Fix Template import may be blocked due to unmet dependency warnings with snmp ports\n  * Fix Newer MySQL versions may error if committing a transaction when not in one\n  * Fix SNMP Agent may not find a cache item\n  * Fix Correct issues running under PHP 8.x\n  * Fix When polling is disabled, boost may crash and creates many arch tables\n  * Fix When poller runs, memory tables may not always be present\n  * Fix Timezones may sometimes be incorrectly calculated\n  * Fix Allow monitoring IPv6 with interface graphs\n  * Fix When a data source uses a Data Input Method, those without a mapping should be flagged\n  * Fix When RRDfile is not yet created, errors may appear when displaying the graph\n  * Fix Cacti missing key indexes that result in Preset pages slowdowns\n  * Fix Data Sources page shows no name when Data Source has no name cache\n  * Fix db_update_table function can not alter table from signed to unsigned\n  * Fix data remains in poller_output table even if it's flushed to rrd files\n  * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places\n  * Fix Offset is a reserved word in MariaDB 10.6 affecting Report\n  * Fix Rendering large trees slowed due to lack of permission caching\n  * Fix Error on interpretation of snmpUtime, when to big\n  * Fix Applying right axis formatting creates an error-image\n  * Fix Unable to Save Graph Settings from the Graphs pages\n  * Fix Graph Template Cache is nullified too often when Graph Automation is running\n  * Fix When Adding a Data Query to a Device, no Progress Spinner is shown\n  * Fix New Browser Breaks Plugins that depend on non UTC date time data\n  * Fix errors when testing remote poller connectivity\n  * Fix errors when renaming poller\n  * Fix Removing spikes by Variance does not appear to be working beyond the first RRA\n  * Fix LDAP API lacks timeout options leading to bad login experiences\n  * Add a normal/wrap class for general use\n  * Limit File Types available for Template Import operations\n  * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication\n  * Support Stronger Encryption Available Starting in Net-SNMP v5.8\n  * Allow Cacti to use multiple possible LDAP servers\n  * Add a 15 minute polling/sampling interval\n  * Provide additional admin email notifications\n  * Add warnings for undesired changes to plugin hook return values\n  * When creating a Graph, make testing the Data Sources optional by Template\n  * Update phpseclib to 2.0.33\n  * Update jstree.js to 3.3.12\n  * Improve performance of Cacti poller on heavily loaded systems\n  * MariaDB recommendations need some tuning for recent updates\n\n","status":"published","published":"2022-05-24T08:17:34Z","modified":"2026-02-04T02:44:55.510544Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:12016-1","title":"cacti-1.2.20-1.1 on GA media","description":"These are all security issues fixed in the cacti-1.2.20-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:36:58.546862Z","updated_at":"2026-11-02T16:58:35.485255Z"}]}}