CVE-2018-8733: SQL Injection
Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to make configuration changes and leverage an authenticated SQL injection vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Nagios XI core config managerto a version that resolves this vulnerability.Fixed in 5.4.13
Event History
Frequently Asked Questions
What is the severity of CVE-2018-8733?
CVE-2018-8733 has a high severity rating due to the potential for unauthenticated attackers to make critical configuration changes.
How do I fix CVE-2018-8733?
To fix CVE-2018-8733, upgrade Nagios XI to version 5.4.13 or later.
What versions of Nagios XI are affected by CVE-2018-8733?
CVE-2018-8733 affects Nagios XI versions 5.2.x through 5.4.x before 5.4.13.
Who can exploit CVE-2018-8733?
CVE-2018-8733 can be exploited by any unauthenticated user, making it particularly dangerous.
What impact does CVE-2018-8733 have on my system?
The impact of CVE-2018-8733 includes the risk of unauthorized configuration changes and the potential for subsequent SQL injection attacks.