CVE-2018-16145 | BDVDB-2026-106535 Detail

Description#

The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited by the nagios user, and would allow attackers to elevate their privileges to root after a system restart, hence obtaining full control of the appliance.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-09-05Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.