Nagios XI < 5.5.0 Multiple Vulnerabilities

Nagios XI is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagiosxi"; if description...

CVE-2018-10553

Nagios XI 5.4.13 exposes a directory traversal vulnerability that allows a registered user to read local files via URIs such as index.php?xiwindow=./ or config/?xiwindow=../. The issue is documented across CVE-2018-10553 sources; root cause is improper input handling enabling path traversal. Impa...