Nagios XI < 5.8 Privilege Escalatioon

Creation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows for Privilege Escalation via creation of symlinks, which are mishandled in getprofile.sh. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

CVE-2020-28910

creationtimestamp| type| source ---|---|--- 2021-05-24 20:42:39+00:00| published-proof-of-concept| Telegram/Ss44dfktnvBrSYmi5h3Hi4YxlnzSVfTwVt3ct0JZrIkPN4 2021-05-27 17:17:10+00:00| published-proof-of-concept| https://t.me/ptswarm/42...

CVE-2020-28910

CVE-2020-28910 affects Nagios XI and is described as a privilege-escalation vulnerability in getprofile.sh caused by insecure temporary directory creation and mishandling of symlinks in Nagios XI 5.7.5 and earlier. The connected sources corroborate the issue as a Nagios XI privilege-escalation ve...

CVE-2020-28910

Creation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows for Privilege Escalation via creation of symlinks, which are mishandled in getprofile.sh...