PT-2021-21614
CVE-2021-37344
·
تاريخ النشر
2021-08-13
·
تاريخ التحديث
2021-09-23
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Nagios XI Switch Wizard versions prior to 2.5.7
Description
The issue is related to remote code execution through improper neutralisation of special elements used in an OS Command, also known as OS Command injection. This allows for the execution of arbitrary commands on the system.
Recommendations
For versions prior to 2.5.7, update to version 2.5.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the Switch Wizard module to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾