CVE-2022-29271

2022-06-2900:58:46

mitre

www.cve.org

nagios xi

read-only user

schedule downtime

incorrect permission check

monitoring checks

EPSS

0.001

Percentile

35.5%

JSON

In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks.

References

assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT

github.com/4LPH4-NL/CVEs

github.com/sT0wn-nl/CVEs/blob/master/README.md#nagios-xi

www.nagios.com/downloads/nagios-xi/change-log/

EPSS

0.001

Percentile

35.5%

JSON

Related for CVELIST:CVE-2022-29271