Shielder - Advisory

types Archives

Advisory

10/04/2019

Nagios XI 5.5.10 config.inc Privilege Escalation

CVE-2019-9166: a privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php.

Advisory

10/04/2019

Advisory

Nagios XI 5.5.10 fusekey Authenticated SQL Injection

CVE-2019-9165: a SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers with a valid 'fusekey' API key to execute arbitrary SQL commands via a malicious user id.

Advisory

10/04/2019

Advisory

Nagios XI 5.5.10 xiwindow Cross-Site Scripting

CVE-2019-9167: a cross-site scripting (XSS) vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow parameter.