Lucene search

[email protected]CVE-2019-15898

HistorySep 03, 2019 - 10:15 p.m.

CVE-2019-15898

2019-09-0322:15:11

CWE-79

[email protected]

web.nvd.nist.gov

109

nagios

log server

cve-2019-15898

reflected xss

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.003 Low

EPSS

Percentile

68.9%

JSON

Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page.

Affected configurations

NVD

Node

nagioslog_serverRange<2.0.8

CPENameOperatorVersion
nagios:log_servernagios log serverlt2.0.8

CPE	Name	Operator	Version
nagios:log_server	nagios log server	lt	2.0.8

References

github.com/lucaottoni/reflectedxss_nagios/blob/master/README.md

www.nagios.com/downloads/nagios-log-server/change-log/

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.003 Low

EPSS

Percentile

68.9%

JSON

Related for CVE-2019-15898

cvelist1 prion1 nvd1