9723 matches found
Input validation
Improper input validation in Nagios Fusion 4.1.8 and earlier allows a remote attacker with control over a fused server to inject arbitrary HTML, aka XSS...
Improper access control
Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the testserver command in ajaxhelper.php...
Design/Logic Flaw
Incorrect SSL certificate validation in Nagios Fusion 4.1.8 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to download of an untrusted update package in upgradetolatest.sh...
Privilege escalation
Incorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root via modification of scripts. Low-privileges users are able to modify files that can be executed by sudo...
Code injection
Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5.7.5 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to an untrusted update package to upgradetolatest.sh...
CVE-2020-28911
Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the testserver command in ajaxhelper.php...
EUVD-2020-21302
Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the testserver command in ajaxhelper.php...
CVE-2020-28911
CVE-2020-28911 concerns Nagios Fusion 4.1.8 and earlier, where an incorrect access control flaw allows low-privileged authenticated users to extract passwords used to manage fused servers via the test_server command in ajaxhelper.php. The issue is described consistently across sources (Red Hat an...
CVE-2020-28909
Incorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root via modification of scripts. Low-privileges users are able to modify files that can be executed by sudo...
CVE-2020-28909
CVE-2020-28909 — Nagios Fusion (4.1.8 and earlier) is affected by a privilege-escalation issue where low-privilege users can modify scripts that are executable via sudo, enabling escalation to root. The description and related sources confirm the root cause as script modification, with high impac...
EUVD-2020-21299
Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios...
CVE-2020-28908
Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios...
CVE-2020-28908
Nagios Fusion 4.1.8 and earlier are affected by a command injection vulnerability in cmd_subsys.php that allows privilege escalation from the Apache user to Nagios. Multiple sources (NVD entry CVE-2020-28908; Red Hat advisory; Nessus plugin for Nagios Fusion
CVE-2020-28907
Nagios Fusion
CVE-2020-28907
Incorrect SSL certificate validation in Nagios Fusion 4.1.8 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to download of an untrusted update package in upgradetolatest.sh...
CVE-2020-28905
Improper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to execute remote code via table pagination...
CVE-2020-28905
Nagios Fusion (versions 4.1.8 and earlier) is affected by CVE-2020-28905 due to improper input validation in the Fusion component that handles table pagination. An authenticated attacker can remotely execute arbitrary code on the affected system, as described in multiple connected advisories (RCE...
CVE-2020-28904
Summary: CVE-2020-28904 affects Nagios Fusion 4.1.8 and earlier, enabling privilege escalation for user nagios via installation of a malicious component containing PHP code. The description specifies execution with unnecessary privileges to escalate to nagios. The connected documents corroborate ...