critical9.8
CVE-2020-28908
Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios.
Impact
Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nagios | Fusion | through 4.1.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html
- https://skylightcyber.com/2021/05/20/13-nagios-vulnerabilities-7-will-shock-you/
- https://www.nagios.com/downloads/nagios-xi/change-log/
- http://packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html
- https://skylightcyber.com/2021/05/20/13-nagios-vulnerabilities-7-will-shock-you/
- https://www.nagios.com/downloads/nagios-xi/change-log/