PT-2018-13161
CVE-2018-15711
·
تاريخ النشر
2018-11-14
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Nagios XI version 5.5.6
Description
The issue allows remote authenticated attackers to reset and regenerate the API key of more privileged users, enabling them to execute API calls at elevated privileges.
Recommendations
For Nagios XI version 5.5.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾