CVE-2024-13997: Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host
Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actions outside the intended security scope of the application, resulting in full control of the operating system.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13997?
CVE-2024-13997 is classified as a high severity privilege escalation vulnerability.
Who is affected by CVE-2024-13997?
Nagios XI versions prior to 2024R1.1.3 are affected by CVE-2024-13997.
How do I fix CVE-2024-13997?
To fix CVE-2024-13997, upgrade Nagios XI to version 2024R1.1.3 or later.
What type of vulnerability is CVE-2024-13997?
CVE-2024-13997 is a privilege escalation vulnerability.
How can an attacker exploit CVE-2024-13997?
An authenticated administrator can exploit CVE-2024-13997 by abusing the Migrate Server feature to gain root privileges on the underlying host.