PT-2021-22865 · Nagios Xi · Nagios Xi

Published 2021-10-26 · Updated 2021-11-02 · CVE-2021-40344

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nagios XI version 5.8.5

Description An issue was discovered in the Custom Includes section of the Admin panel, where an administrator can upload files with arbitrary extensions as long as the MIME type corresponds to an image. This allows the upload of a crafted PHP script to achieve remote command execution.

Recommendations For Nagios XI version 5.8.5, consider disabling the file upload feature in the Custom Includes section of the Admin panel until a patch is available. Restrict access to the Admin panel to minimize the risk of exploitation. Avoid using the file upload feature with arbitrary extensions to prevent potential remote command execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-40344

Affected Products

Nagios Xi

References · 7

• 🔥 https://synacktiv.com/sites/default/files/2021-10/Nagios_XI_multiple_vulnerabilities_0.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2021-40344 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40344 · Security Note
• https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT · Vendor Advisory
• https://t.me/cibsecurity/31194 · Telegram Post
• https://t.me/cvenotify/22878 · Telegram Post
• https://synacktiv.com · Note