Nagios XI Remote Code Execution (CVE-2021-40344)

A remote code execution vulnerability exists in Nagios XI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2021-40344

creationtimestamp| type| source ---|---|--- 2021-10-26 14:14:46+00:00| seen| https://t.me/cibsecurity/31194...

CVE-2021-40344

An issue was discovered in Nagios XI 5.8.5. In the Custom Includes section of the Admin panel, an administrator can upload files with arbitrary extensions as long as the MIME type corresponds to an image. Therefore it is possible to upload a crafted PHP script to achieve remote command execution...

CVE-2021-40344

CVE-2021-40344 affects Nagios XI 5.8.5. In the Admin panel’s Custom Includes, an administrator can upload files with arbitrary extensions if the MIME type matches an image, enabling a crafted PHP script upload and remote code execution. The root cause is inadequate validation of uploaded content/...

CVE-2021-40344

An issue was discovered in Nagios XI 5.8.5. In the Custom Includes section of the Admin panel, an administrator can upload files with arbitrary extensions as long as the MIME type corresponds to an image. Therefore it is possible to upload a crafted PHP script to achieve remote command execution...