CVE-2020-28906: Critical severity nagios fusion vulnerability
Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root. Low-privileged users are able to modify files that are included (aka sourced) by scripts executed by root.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-28906.
What is the severity of CVE-2020-28906?
CVE-2020-28906 has a severity rating of 8.8 (critical).
What is the affected software?
Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier are affected by this vulnerability.
What is the risk of this vulnerability?
This vulnerability allows for Privilege Escalation to root, potentially allowing low-privileged users to execute scripts with root privileges.
Are there any available fixes for CVE-2020-28906?
The vendor has not provided an official fix for this vulnerability at the moment. It is recommended to update to the latest version of Nagios XI and Nagios Fusion once a patch is released.