| Package | Affected versions | Patched versions |
|---|---|---|
| nagios xi | = 2012< 2012 | 2012 |
Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool. User-controlled input is passed to a shell without adequate sanitation or argument quoting, allowing an authenticated user with access to discovery functionality to execute arbitrary commands with the privileges of the application service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free