CVE-2020-6585

概要

参考情報

• assets.nagios.com/downloads/nagios-log-server/CHANGES.TXT · Release Notes
• medium.com/%40fixitt6/multiple-vulnerabilities-in-nagios-log-server-2-1-3-af7c160edc60
• nagios.com/products/nagios-log-server · Product

nagios のその他の脆弱性

• CVE-2020-13977中 4.9Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify th…
• CVE-2020-6586中 5.4Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any m…
• CVE-2020-6584中 6.5Nagios Log Server 2.1.3 has Incorrect Access Control.
• CVE-2019-3698高 7.0UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enter…
• CVE-2016-8641高 7.8A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely ch…