Vulnerability Description
Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands as the Apache web user (or the backend shell user) to escalate to root on the host.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nagios | Log Server | < 2024 |
Related Weaknesses (CWE)
References
- https://www.nagios.com/changelog/#log-server-2024R1Release Notes
- https://www.nagios.com/products/security/#log-serverRelease Notes
- https://www.vulncheck.com/advisories/nagios-log-server-lpe-from-apache-backend-sThird Party Advisory
FAQ
What is CVE-2024-58273?
CVE-2024-58273 is a vulnerability with a CVSS score of 7.8 (HIGH). Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands as the Apache web user (or the backend shell user) ...
How severe is CVE-2024-58273?
CVE-2024-58273 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-58273?
Check the references section above for vendor advisories and patch information. Affected products include: Nagios Log Server.