Vulnerability Description
An issue was found in Nagios XI before 5.7.3. There is a privilege escalation vulnerability in backend scripts that ran as root where some included files were editable by nagios user. This issue was fixed in version 5.7.3.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nagios | Nagios Xi | < 5.7.3 |
References
- https://www.nagios.com/downloads/nagios-xi/change-log/Vendor Advisory
- https://www.nagios.com/downloads/nagios-xi/change-log/Vendor Advisory
FAQ
What is CVE-2020-15903?
CVE-2020-15903 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was found in Nagios XI before 5.7.3. There is a privilege escalation vulnerability in backend scripts that ran as root where some included files were editable by nagios user. This issue was f...
How severe is CVE-2020-15903?
CVE-2020-15903 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-15903?
Check the references section above for vendor advisories and patch information. Affected products include: Nagios Nagios Xi.