PT-2021-3460 · Nagios · Nagios Fusion

Published 2021-05-24 · Updated 2021-05-28 · CVE-2020-28901

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Nagios Fusion versions 4.1.8 and earlier

Description The issue is related to a lack of input data sanitization in the cmd subsys.php component, which can be exploited by a remote attacker to escalate privileges or execute arbitrary code as root. This can occur through vectors related to corrupt component installation.

Recommendations For Nagios Fusion versions 4.1.8 and earlier, consider disabling the cmd subsys.php component until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2021-03321

CVE-2020-28901

Affected Products

Nagios Fusion

References · 6

• 🔥 https://skylightcyber.com/2021/05/20/13-nagios-vulnerabilities-7-will-shock-you · Exploit
• https://osv.dev/vulnerability/CVE-2020-28901 · Vendor Advisory
• https://nagios.com/downloads/nagios-xi/change-log · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-28901 · Security Note
• https://bdu.fstec.ru/vul/2021-03321 · Security Note
• http://packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html · Note