| Package | Affected versions | Patched versions |
|---|---|---|
| nagios xi | ≤ 5.8.5 |
In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free