EUVD-2019-18579

Malware in sbrugna...

CVE-2019-9204

SQL injection vulnerability in Nagios IM component of Nagios XI before 2.2.7 allows attackers to execute arbitrary SQL commands...

CVE-2019-9203

Authorization bypass in Nagios IM component of Nagios XI before 2.2.7 allows closing incidents in IM via the API...

CVE-2019-9202

Nagios IM component of Nagios XI before 2.2.7 allows authenticated users to execute arbitrary code via API key issues...

Nagios IM SQL Injection (CVE-2019-9204)

An SQL injection vulnerability exists in Nagios IM. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Nagios IM Command Injection (CVE-2019-9202)

A command injection vulnerability exists in Nagios IM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2019-9202

Nagios IM component of Nagios XI before 2.2.7 allows authenticated users to execute arbitrary code via API key issues...

CVE-2019-9204

SQL injection vulnerability in Nagios IM component of Nagios XI before 2.2.7 allows attackers to execute arbitrary SQL commands...

CVE-2019-9202

Nagios IM component of Nagios XI before 2.2.7 allows authenticated users to execute arbitrary code via API key issues...

Input validation

Nagios IM component of Nagios XI before 2.2.7 allows authenticated users to execute arbitrary code via API key issues...

CVE-2019-9203

Authorization bypass in Nagios IM component of Nagios XI before 2.2.7 allows closing incidents in IM via the API...

CVE-2019-9203

CVE-2019-9203 affects Nagios IM (component of Nagios XI) prior to 2.2.7. The issue is an authorization bypass that permits closing incidents in IM via the API, enabling unauthorized operations. Documents consistently describe this vulnerability as an authorization bypass in Nagios IM before 2.2.7...

PT-2019-19434 · Nagios · Nagios Xi +1

Name of the Vulnerable Software and Affected Versions: Nagios IM versions prior to 2.2.7 Description: The issue allows for authorization bypass in Nagios IM, a component of Nagios XI, enabling the closure of incidents via the API. Recommendations: For versions prior to 2.2.7, update to version...

PT-2019-19433 · Nagios · Nagios Im

Name of the Vulnerable Software and Affected Versions: Nagios IM versions prior to 2.2.7 Description: The issue allows authenticated users to execute arbitrary code due to API key problems. Recommendations: For versions prior to 2.2.7, update to version 2.2.7 or later to resolve the issue...

PT-2019-19435 · Nagios · Nagios Im

Name of the Vulnerable Software and Affected Versions: Nagios IM versions prior to 2.2.7 Description: A SQL injection issue allows attackers to execute arbitrary SQL commands. Recommendations: For versions prior to 2.2.7, update to version 2.2.7 or later to resolve the issue...