First published: Fri Aug 13 2021(Updated: )
Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is being imported from the var directory for some scripts with elevated permissions.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Nagios Nagios XI | <5.8.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of Nagios XI is CVE-2021-37345.
The severity of CVE-2021-37345 is high.
The affected software of CVE-2021-37345 is Nagios XI before version 5.8.5.
The CVE reference of CVE-2021-37345 is CVE-2021-37345.
To fix the vulnerability CVE-2021-37345, you should update Nagios XI to version 5.8.5 or later.