CVE-2018-16145 Privilege escalation in n/a
A local attacker with nagios user access can escalate privileges to root by modifying a boot script, gaining full control of the Opsview Monitor appliance.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-16145?
CVE-2018-16145 is a high-severity vulnerability in n/a, published on 5 Sep 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited by the nagios user, and would allow attackers to elevate their privileges to root after a system restart, hence obtaining full control of the appliance.
Weakness: CWE-732
Which versions are affected by CVE-2018-16145?
It affects 1 product.
Products include Opsview Opsview.
How do I fix CVE-2018-16145?
No fix has been published for CVE-2018-16145 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-16145 being exploited?
There is no known exploitation of CVE-2018-16145 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-g4w9-9j5j-xq6r.