ID:5960 - Exploit for Input validation error in Nagios XI - CVE-2018-15708

 
Main Vulnerability Database Exploits ID:5960 - Exploit for Input validation error in Nagios XI - CVE-2018-15708

ID:5960 - Exploit for Input validation error in Nagios XI - CVE-2018-15708

Published: June 17, 2021


Vulnerability identifier: #VU36396
Vulnerability risk: High
CVE-ID: CVE-2018-15708
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Nagios XI

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.


Remediation

Install update from vendor's website.