CVE-2018-8733

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0950%

EPSS Percentile6.17th

Published2018年4月18日

Last Modified2024年11月21日

Vulnerability Description

Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to make configuration changes and leverage an authenticated SQL injection vulnerability.

Affected Platforms (CPE)

📦

Nagios

Nagios Xi

>= 5.2.0 and < 5.4.13

References & Advisories

🔗 https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT

🔗 https://blog.redactedsec.net/exploits/2018/04/26/nagios.html

🔗 https://gist.github.com/caleBot/f0a93b5a98574393e0139104eacc2d0f

🔗 https://www.exploit-db.com/exploits/44560/

🔗 https://www.exploit-db.com/exploits/44969/

🔗 https://www.nagios.com/downloads/nagios-xi/change-log/