Lucene search

K
redhatcveRedhat.comRH:CVE-2020-6581
HistoryMar 24, 2020 - 7:01 p.m.

CVE-2020-6581

2020-03-2419:01:48
redhat.com
access.redhat.com
16

EPSS

0.001

Percentile

43.4%

A flaw was found in nrpe. A command injection is possible due to insufficient filtering. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Mitigation

Disable nasty_metachars and dont_blame_nrpe option inside the NRPE configuration file - /etc/nagios/nrpe.cfg