CVE-2021-37343: Path Traversal
A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post authenticated RCE under security context of the user running Nagios.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-37343?
CVE-2021-37343 is a path traversal vulnerability in Nagios XI below version 5.8.5 AutoDiscovery component, which could lead to post-authenticated remote code execution (RCE) under the security context of the user running Nagios.
What is the severity of CVE-2021-37343?
The severity of CVE-2021-37343 is high, with a CVSS score of 8.8.
Which version of Nagios XI is affected by CVE-2021-37343?
Nagios XI versions below 5.8.5 are affected by CVE-2021-37343.
How can CVE-2021-37343 be exploited?
CVE-2021-37343 can be exploited through a path traversal vulnerability in the AutoDiscovery component of Nagios XI, which allows an attacker to execute remote code under the security context of the Nagios user.
Is there a patch available for CVE-2021-37343?
Yes, the vulnerability can be fixed by updating Nagios XI to version 5.8.5 or above.