Lucene search

K
nvd[email protected]NVD:CVE-2024-43199
HistoryAug 07, 2024 - 2:15 p.m.

CVE-2024-43199

2024-08-0714:15:33
CWE-269
CWE-732
web.nvd.nist.gov
5
nagios
ndoutils
privilege escalation
vulnerability
executable files

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

26.3%

Nagios NDOUtils before 2.1.4 allows privilege escalation from nagios to root because certain executable files are owned by the nagios user.

Affected configurations

Nvd
Node
nagiosndoutilsRange<2.1.4
VendorProductVersionCPE
nagiosndoutils*cpe:2.3:a:nagios:ndoutils:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

26.3%

Related for NVD:CVE-2024-43199