CVE-2024-58273: Nagios Log Server < 2024R1.0.2 LPE from Apache/Backend Shell User to Root
Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands as the Apache web user (or the backend shell user) to escalate to root on the host.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Nagios Log Serverto a version that resolves this vulnerability.Fixed in 2024R1.0.2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58273?
CVE-2024-58273 is a high-severity local privilege escalation vulnerability in Nagios Log Server.
How do I fix CVE-2024-58273?
To fix CVE-2024-58273, upgrade Nagios Log Server to version 2024R1.0.2 or later.
Who is affected by CVE-2024-58273?
CVE-2024-58273 affects all versions of Nagios Log Server prior to 2024R1.0.2.
What type of vulnerability is CVE-2024-58273?
CVE-2024-58273 is categorized as a local privilege escalation vulnerability.
What can an attacker do with CVE-2024-58273?
An attacker exploiting CVE-2024-58273 can escalate privileges from the Apache web user to root on the host.