Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-20197
HistoryDec 31, 2019 - 7:15 p.m.

Design/Logic Flaw

2019-12-3119:15:00
PRIOn knowledge base
www.prio-n.com
4

8.8 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.3%

In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account.

CPENameOperatorVersion
nagios_xieq5.6.9

8.8 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.3%