Nagios XI Local Elevation of Privilege Vulnerability

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting, and rich data visualization.A local elevation of privilege vulnerability exists in versions of Nagios XI prior to 5.8.5. The vulnerability stems from cleaner.php...

Input validation

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php does not sanitise input read from the database...

CVE-2021-37349

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php does not sanitise input read from the database...

CVE-2021-37349

CVE-2021-37349 affects Nagios XI prior to version 5.8.5. The vulnerability is a local privilege escalation caused by cleaner.php not sanitising input read from the database. Public records consistently describe it as a local privilege escalation flaw (root privileges in context of the Nagios user...