During a recent penetration test Computest found and exploited various issues in Observium, going from unauthenticated user to full shell access as root.