Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-17148

Опубликовано: 19 июн. 2019
Источник: redhat
CVSS3: 5.4

Описание

An Insufficient Access Control vulnerability (leading to credential disclosure) in coreconfigsnapshot.php (aka configuration snapshot page) in Nagios XI before 5.5.4 allows remote attackers to gain access to configuration files containing confidential credentials.

Отчет

This issue did not affect Red Hat Gluster Storage 3 as it does not ship Nagios XI.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Storage 3nagiosNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-284
https://bugzilla.redhat.com/show_bug.cgi?id=1728580XI: insufficient access control vulnerability in coreconfigsnapshot.php

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 9.8
nvd
больше 6 лет назад

An Insufficient Access Control vulnerability (leading to credential disclosure) in coreconfigsnapshot.php (aka configuration snapshot page) in Nagios XI before 5.5.4 allows remote attackers to gain access to configuration files containing confidential credentials.

CVSS3: 9.8
github
больше 3 лет назад

An Insufficient Access Control vulnerability (leading to credential disclosure) in coreconfigsnapshot.php (aka configuration snapshot page) in Nagios XI before 5.5.4 allows remote attackers to gain access to configuration files containing confidential credentials.

5.4 Medium

CVSS3