Main Vulnerability Database Exploits ID:6009 - Exploit for Input validation error in Nagios XI - CVE-2018-15708

ID:6009 - Exploit for Input validation error in Nagios XI - CVE-2018-15708

Published: June 17, 2021

Vulnerability identifier: #VU36396

Vulnerability risk: High

CVE-ID: CVE-2018-15708

CWE-ID: CWE-20

Exploitation vector: Remote access

Vulnerable software:
Nagios XI

Link to public exploit:

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.

Install update from vendor's website.