CVE-2020-15903 Privilege escalation in n/a
A local attacker with nagios user access can escalate privileges to root by modifying editable backend scripts in Nagios XI.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-15903?
CVE-2020-15903 is a critical vulnerability in Nagios Nagios Xi, published on 9 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was found in Nagios XI before 5.7.3. There is a privilege escalation vulnerability in backend scripts that ran as root where some included files were editable by nagios user. This issue was fixed in version 5.7.3.
Which versions are affected by CVE-2020-15903?
It affects 1 product.
Products include Nagios Nagios Xi.
How do I fix CVE-2020-15903?
No fix has been published for CVE-2020-15903 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-15903 being exploited?
There is no known exploitation of CVE-2020-15903 in the wild and no public exploit code.
Other vulnerabilities in Nagios Nagios Xi
Sources
Also known as GHSA-mf64-j3g8-vgpj.