Nagios XI 输入验证错误漏洞

漏洞信息详情

Nagios XI是美国Nagios公司的一套IT基础设施监控解决方案。该方案支持对应用、服务、操作系统等进行监控和预警。

Nagios XI 5.7.5之前版本存在安全漏洞，该漏洞源于Auto-Discovery component不正确的输入验证攻击者可利用该漏洞执行远程代码。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://www.nagios.com/downloads/nagios-xi/change-log/

来源:MISC

链接:https://skylightcyber.com/2021/05/20/13-nagios-vulnerabilities-7-will-shock-you/

来源:MISC

链接:https://packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html

来源:MISC

链接:https://www.nagios.com/downloads/nagios-xi/change-log/

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2020-28648

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html

暂无