PT-2021-4143
CVE-2021-37349
·
تاريخ النشر
2021-08-13
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Nagios XI versions prior to 5.8.5
Description
The issue is related to insecure privilege management in the clean.php file of the Nagios XI monitoring tool. It allows an attacker to escalate their privileges due to the lack of input sanitization from the database.
Recommendations
For versions prior to 5.8.5, update to version 5.8.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the cleaner.php file until a patch is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾