Описание
An issue was discovered in Nagios XI 5.8.5. In the Manage Dashlets section of the Admin panel, an administrator can upload ZIP files. A command injection (within the name of the first file in the archive) allows an attacker to execute system commands.
Ссылки
- Release NotesVendor Advisory
- ExploitThird Party Advisory
- Not Applicable
- ExploitThird Party Advisory
- Release NotesVendor Advisory
- ExploitThird Party Advisory
- Not Applicable
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:nagios:nagios_xi:5.8.5:*:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.7475
Высокий
7.2 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-77
Связанные уязвимости
CVSS3: 7.2
github
больше 3 лет назад
An issue was discovered in Nagios XI 5.8.5. In the Manage Dashlets section of the Admin panel, an administrator can upload ZIP files. A command injection (within the name of the first file in the archive) allows an attacker to execute system commands.
EPSS
Процентиль: 99%
0.7475
Высокий
7.2 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-77