CVE-2020-28908: Command Injection
Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this command injection vulnerability in Nagios Fusion?
The vulnerability ID for this command injection vulnerability in Nagios Fusion is CVE-2020-28908.
What is the severity of CVE-2020-28908?
The severity of CVE-2020-28908 is critical with a severity value of 9.8.
How does the command injection vulnerability in Nagios Fusion allow for privilege escalation to nagios?
The command injection vulnerability in Nagios Fusion allows an attacker to execute arbitrary commands as the nagios user, which leads to privilege escalation.
Which version of Nagios Fusion is affected by CVE-2020-28908?
Nagios Fusion version 4.1.8 and earlier are affected by CVE-2020-28908.
Where can I find more information about CVE-2020-28908 and related vulnerabilities in Nagios?
You can find more information about CVE-2020-28908 and related vulnerabilities in Nagios on the following websites: [Packet Storm Security](http://packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html), [Skylight Cyber](https://skylightcyber.com/2021/05/20/13-nagios-vulnerabilities-7-will-shock-you/), and [Nagios Change Log](https://www.nagios.com/downloads/nagios-xi/change-log/).