high8.8
CVE-2020-15901
In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys.
Impact
In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nagios | Nagios Xi | before 5.7.2 |
References
- NVD record
- CVE.org record
- https://insinuator.net/2020/07/security-advisories-for-nagios-xi/
- https://www.nagios.com/downloads/nagios-xi/change-log/
- https://www.nagios.com/products/security/
- https://insinuator.net/2020/07/security-advisories-for-nagios-xi/
- https://www.nagios.com/downloads/nagios-xi/change-log/
- https://www.nagios.com/products/security/