CVE-2018-8735 | BDVDB-2026-99696 Detail
Description#
Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target system, aka OS command injection.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://gist.github.com/caleBot/f0a93b5a98574393e0139104eacc2d0f
- https://www.exploit-db.com/exploits/44560/
- https://www.nagios.com/downloads/nagios-xi/change-log/
- https://blog.redactedsec.net/exploits/2018/04/26/nagios.html
- https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
- https://www.exploit-db.com/exploits/44969/
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.