Improper access control

2021-01-2618:16:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.7, allows an unauthenticated attacker to execute remote code as the apache user.

CPENameOperatorVersion
nagios_xile5.7.0

CPE	Name	Operator	Version
	nagios_xi	le	5.7.0

References

www.nagios.com/products/security/