| Package | Affected versions | Patched versions |
|---|---|---|
| nagios xi | < 5.7.3 | 5.7.3 |
Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script. The script performed profile retrieval and initialization routines using insecure file/command handling and insufficient validation of attacker-controlled inputs, and in some deployments executed with elevated privileges. A local attacker with low-level access could exploit these weaknesses to cause the script to execute arbitrary commands or modify privileged files, resulting in privilege escalation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free