Main Vulnerability Database Exploits ID:5959 - Exploit for OS Command Injection in Nagios XI - CVE-2018-15710

ID:5959 - Exploit for OS Command Injection in Nagios XI - CVE-2018-15710

Published: June 17, 2021

Vulnerability identifier: #VU36398

Vulnerability risk: Low

CVE-ID: CVE-2018-15710

CWE-ID: CWE-78

Exploitation vector: Local access

Vulnerable software:
Nagios XI

Link to public exploit:

The vulnerability allows a local authenticated user to execute arbitrary code.

Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.

Install update from vendor's website.