CVE-2020-28911: Medium severity nagios fusion vulnerability
Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the testserver command in ajaxhelper.php.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-28911?
CVE-2020-28911 is a vulnerability in Nagios Fusion 4.1.8 and earlier that allows low-privileged authenticated users to extract passwords used to manage fused servers.
What is the severity of CVE-2020-28911?
The severity of CVE-2020-28911 is medium with a CVSS score of 6.5.
How can low-privileged authenticated users exploit CVE-2020-28911?
Low-privileged authenticated users can exploit CVE-2020-28911 by using the test_server command in ajaxhelper.php to extract passwords used to manage fused servers.
What is the affected software for CVE-2020-28911?
The affected software for CVE-2020-28911 is Nagios Fusion 4.1.8 and earlier.
Is there a fix available for CVE-2020-28911?
Yes, it is recommended to update to a version of Nagios Fusion that is newer than 4.1.8 to fix CVE-2020-28911.