CVE-2013-3512: The Cacti component in GroundWork Monitor Enterprise 6.7.0 does not properly perform authorization checks,...

Security readout for executives and security teams

GroundWork Monitor Enterprise 6.7.0 included a Cacti web component that could let logged-in users bypass role controls. The practical risk is unauthorized access to monitoring configuration and credentials, which can expose infrastructure details and enable follow-on compromise. Exposure is likely limited to organizations still running GroundWork Monitor Enterprise 6.7.0 with the bundled Cacti component accessible to authenticated users. Risk increases if the monitoring portal is reachable from broad internal networks, contractors, or the internet. Prioritize remediation where this monitoring system still exists, because monitoring platforms often hold privileged credentials and infrastructure maps. Treat internet-reachable or broadly accessible instances as urgent. Mitigation focus: Identify any GroundWork Monitor Enterprise 6.7.0 deployments and enabled Cacti components.; Check GroundWork advisory SA6.7.0-1 for vendor-supported fixes or workarounds.; Restrict monitoring portal access to trusted administrative networks and accounts..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.