Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-13977

Опубликовано: 09 июн. 2020
Источник: nvd
CVSS3: 4.9
CVSS2: 4
EPSS Низкий

Описание

Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been mistakenly associated with CVE-2020-1408.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:nagios:nagios:4.4.5:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

EPSS

Процентиль: 83%
0.01872
Низкий

4.9 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-829

Связанные уязвимости

CVSS3: 4.9
ubuntu
больше 5 лет назад

Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been mistakenly associated with CVE-2020-1408.

CVSS3: 4.9
debian
больше 5 лет назад

Nagios 4.4.5 allows an attacker, who already has administrative access ...

github
больше 3 лет назад

Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files.

suse-cvrf
больше 4 лет назад

Security update for nagios

EPSS

Процентиль: 83%
0.01872
Низкий

4.9 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-829