CVE-2021-3193: Critical severity Nagios Nagios XI vulnerability
Published Jan 22, 2021
·Updated
Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.7, allows an unauthenticated attacker to execute remote code as the apache user.
Affected Software
1 affected component
Nagios Nagios XI<=5.7.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Nagios Docker Config Wizard (Nagios XI through 5.7)to a version that resolves this vulnerability.Fixed in 1.1.2
Event History
Jan 22, 2021
CVE Published
via MITRE·03:56 AM
Data Sourced
via MITRE·03:56 AM
Description
Jan 26, 2021
Data Sourced
via NVD·06:16 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-3193.
2
What is the severity of CVE-2021-3193?
CVE-2021-3193 has a severity rating of critical (9.8).
3
Which software is affected by CVE-2021-3193?
Nagios XI versions up to 5.7 are affected by CVE-2021-3193.
4
What is the impact of CVE-2021-3193?
CVE-2021-3193 allows an unauthenticated attacker to execute remote code as the apache user.
5
How can I fix CVE-2021-3193?
To fix CVE-2021-3193, update to Nagios Docker Config Wizard version 1.1.2 or later.