CVE-2019-9204

概要

参考情報

• packetstormsecurity.com/files/152496/Nagios-XI-5.5.10-XSS-Remote-Code-Execution.html · Exploit
• nagios.com/products/security · Vendor Advisory

incident manager のその他の脆弱性

• CVE-2019-9203緊急 9.8Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.
• CVE-2019-9202高 8.8Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues.