Directory traversal

2018-04-3003:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.8%

JSON

An issue was discovered in Nagios XI 5.4.13. A registered user is able to use directory traversal to read local files, as demonstrated by URIs beginning with index.php?xiwindow=./ and config/?xiwindow=…/ substrings.

CPENameOperatorVersion
nagios_xieq5.4.13

CPE	Name	Operator	Version
	nagios_xi	eq	5.4.13

References

code610.blogspot.com/2018/04/few-bugs-in-latest-nagios-xi-5413.html