Nagios XI Elevation of Privilege Vulnerability (CNVD-2019-10018)

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. An elevation of privilege vulnerability exists in Nagios XI versions prior to 5.5.11. A local attacker can exploit this vulnerability ...

CVE-2019-9166: Incorrect Permission Assignment for Critical Resource

Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and importxiconfig.php...