VDB

GCVE-110-MAGEIA-2021-209

GCVE-110-MAGEIA-2021-209
Advisory Published
Vulnetix · Advisory published May 12, 2021
Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files (CVE-2020-13977).

Affected Products

VendorProductVersionsPlatforms
Mageiamicrocode0 (affected), 0.20210608-3.mga8.nonfree (unaffected)—
Mageianagios0 (affected), 4.4.3-2.1.mga7 (unaffected), 4.4.3-2.1.mga7 (unaffected), 0 (affected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›