CVE-2020-28909
First published: Mon May 24 2021(Updated: )
Incorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root via modification of scripts. Low-privileges users are able to modify files that can be executed by sudo.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nagios Fusion | <=4.1.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2020-28909.
What is the severity of CVE-2020-28909?
CVE-2020-28909 has a severity rating of 8.8 (Critical).
What is the affected software and version?
The affected software is Nagios Fusion version 4.1.8 and earlier.
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is CWE-732.
How can an attacker exploit CVE-2020-28909?
An attacker can exploit CVE-2020-28909 by modifying files that can be executed by sudo, allowing for privilege escalation to root.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nagios
- canonical/nagios fusion
- version/nagios fusion/4.1.8