Lucene search

K
cveMitreCVE-2024-43199
HistoryAug 07, 2024 - 2:15 p.m.

CVE-2024-43199

2024-08-0714:15:33
CWE-269
CWE-732
mitre
web.nvd.nist.gov
11
nagios
ndoutils
privilege escalation
vulnerability
executable files
owned by nagios user

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

26.3%

Nagios NDOUtils before 2.1.4 allows privilege escalation from nagios to root because certain executable files are owned by the nagios user.

Affected configurations

Nvd
Node
nagiosndoutilsRange<2.1.4
VendorProductVersionCPE
nagiosndoutils*cpe:2.3:a:nagios:ndoutils:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

26.3%

Related for CVE-2024-43199