CVE-2018-17148: Critical severity nagios xi vulnerability
Published Jun 19, 2019
·Updated
An Insufficient Access Control vulnerability (leading to credential disclosure) in coreconfigsnapshot.php (aka configuration snapshot page) in Nagios XI before 5.5.4 allows remote attackers to gain access to configuration files containing confidential credentials.
Affected Software
1 affected component
Nagios Nagios XI<5.5.4
Event History
Jun 19, 2019
CVE Published
via MITRE·05:23 PM
Data Sourced
via MITRE·05:23 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-17148?
CVE-2018-17148 is classified as a critical vulnerability due to its potential for credential disclosure.
2
How do I fix CVE-2018-17148?
To fix CVE-2018-17148, upgrade Nagios XI to version 5.5.4 or later.
3
What type of vulnerability is CVE-2018-17148?
CVE-2018-17148 is an Insufficient Access Control vulnerability.
4
What software is affected by CVE-2018-17148?
CVE-2018-17148 affects Nagios XI versions prior to 5.5.4.
5
What can attackers gain from exploiting CVE-2018-17148?
Exploitation of CVE-2018-17148 allows attackers to access configuration files containing sensitive credentials.