CVE-2020-28906

Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root. Low-privileged users are able to modify files that are included (aka sourced) by scripts executed by root.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2021-05-24

Last modified

2024-08-04

Weaknesses

CWE-276

Affected products

• Fusion (Nagios)
• Nagios Xi (Nagios)

References

• http://packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.h…
• https://skylightcyber.com/2021/05/20/13-nagios-vulnerabilities-7-will-shock-you/
• https://www.nagios.com/downloads/nagios-xi/change-log/