CVE-2020-28910

2021-05-2412:44:15

mitre

www.cve.org

nagios

privilege escalation

temporary directory insecure permissions

cve-2020-28910

symlinks

AI Score

9.6

Confidence

High

EPSS

0.08

Percentile

94.4%

JSON

Creation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows for Privilege Escalation via creation of symlinks, which are mishandled in getprofile.sh.

References

packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html

skylightcyber.com/2021/05/20/13-nagios-vulnerabilities-7-will-shock-you/

www.nagios.com/downloads/nagios-xi/change-log/