CVE-2020-5792: High severity Nagios Nagios XI vulnerability
Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and ultimately execute code with the privileges of the apache user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-5792?
CVE-2020-5792 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2020-5792?
To fix CVE-2020-5792, upgrade Nagios XI to version 5.7.4 or later.
Who is affected by CVE-2020-5792?
CVE-2020-5792 affects Nagios XI version 5.7.3 deployed on any system accessible to authenticated admin users.
What attacks can be carried out using CVE-2020-5792?
CVE-2020-5792 allows an authenticated attacker to write to arbitrary files and execute code with the privileges of the apache user.
What is Nagios XI?
Nagios XI is an application used for IT infrastructure monitoring that can be affected by vulnerabilities such as CVE-2020-5792.