CVE-2020-6584

Mô tả

Tham khảo

• assets.nagios.com/downloads/nagios-log-server/CHANGES.TXT · Release Notes
• medium.com/%40fixitt6/multiple-vulnerabilities-in-nagios-log-server-2-1-3-af7c160edc60
• nagios.com/products/nagios-log-server · Product

Lỗ hổng khác của nagios

• CVE-2020-13977TRUNG BÌNH 4.9Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify th…
• CVE-2020-6586TRUNG BÌNH 5.4Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any m…
• CVE-2020-6585CAO 8.8Nagios Log Server 2.1.3 has CSRF.
• CVE-2019-3698CAO 7.0UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enter…
• CVE-2016-8641CAO 7.8A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely ch…