CVE-2018-15709: OS Command Injection
Published Nov 14, 2018
·Updated
Nagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted HTTP request.
Affected Software
1 affected component
Nagios Nagios XI=5.5.6
Event History
Nov 14, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-15709?
CVE-2018-15709 has a high severity rating due to the potential for remote command execution.
2
How do I fix CVE-2018-15709?
To fix CVE-2018-15709, upgrade Nagios XI to version 5.5.7 or later.
3
Who is affected by CVE-2018-15709?
Users of Nagios XI version 5.5.6 are affected by CVE-2018-15709.
4
What types of attacks can CVE-2018-15709 facilitate?
CVE-2018-15709 can facilitate remote authenticated attacks that allow execution of arbitrary commands.
5
What is the attack vector for CVE-2018-15709?
The attack vector for CVE-2018-15709 is through crafted HTTP requests sent to the Nagios XI application.