CVE-2002-1479: The Cacti Group Cacti

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges.

Affected products

• The Cacti Group Cacti: version 0.5 only; version 0.6 only; version 0.6.1 only; version 0.6.2 only; version 0.6.3 only; version 0.6.4 only; …

Published 2003-04-22. Last modified 2026-06-16.