CVE-2018-13457

Mô tả

Tham khảo

• lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html
• lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.html
• gist.github.com/fakhrizulkifli/87cf1c1ad403b4d40a86d90c9c9bf7ab · Exploit
• knowledge.opsview.com/v5.3/docs/whats-new · Third Party Advisory
• knowledge.opsview.com/v5.4/docs/whats-new · Third Party Advisory
• exploit-db.com/exploits/45082 · Exploit

Lỗ hổng khác của nagios core

• CVE-2020-35269CAO 8.8Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery (CSRF) in many functions, like adding – deleting…
• CVE-2018-18245TRUNG BÌNH 5.4Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check…
• CVE-2018-13458TRUNG BÌNH 5.5qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denia…
• CVE-2017-14312CAO 7.8Nagios Core through 4.3.4 initially executes /usr/sbin/nagios as root but supports configuration options in which this file is owned by a no…