Launchpad.net

CVE 2020-13230

In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that account (e.g., permission to view logs).

See the CVE page on Mitre.org for more details.