Exploit for Improper Privilege Management in Nagios Nagios_Xi

CVE Discovered by: K. Wahab NeoX Vulnerability Details:...

CVE-2024-33775

An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted Dashlet...

CVE-2024-33775

CVE-2024-33775 affects the Autodiscover component in Nagios XI 2024R1.01 , allowing a remote attacker with low privileges (NAGIOS or APACHE account) to escalate to root by injecting arbitrary code into a crafted Dashlet and executing autodiscover_new.php via sudo. The vulnerability yields full co...