PT-2021-11601 · Nagios Xi · Nagios Xi

Published 2021-05-24 · Updated 2022-07-12 · CVE-2020-28910

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Nagios XI versions 5.7.5 and earlier

Description: The issue involves the creation of a temporary directory with insecure permissions, allowing for privilege escalation through the creation of symlinks. These symlinks are mishandled in the getprofile.sh function.

Recommendations: For Nagios XI versions 5.7.5 and earlier, consider restricting access to the getprofile.sh function until a patch is available. As a temporary workaround, avoid using the getprofile.sh function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-28910

Affected Products

Nagios Xi

References · 7

• 🔥 https://skylightcyber.com/2021/05/20/13-nagios-vulnerabilities-7-will-shock-you · Exploit
• https://nagios.com/downloads/nagios-xi/change-log · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-28910 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-28910 · Security Note
• https://t.me/cvenotify/15213 · Telegram Post
• https://t.me/ptswarm/42 · Telegram Post
• http://packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html · Note