9.8crit
CVE-2018-8733in critical feed4 exploits
Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated att…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
26.6%
percentile 98%
Public exploits
4
Metasploit · Exploit-DB
Summary
Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to make configuration changes and leverage an authenticated SQL injection vulnerability.
Exploit prediction (EPSS)
26.56% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.
Exploits and detections
- Metasploit exploit/linux/http/nagios_xi_chained_rce_2_electric_boogaloo Nagios XI Chained Remote Code Execution · metasploit exploit, manual rank · 2018-04-17
- Metasploit exploit/linux/http/nagios_xi_chained_rce Nagios XI Chained Remote Code Execution · metasploit exploit, excellent rank · 2016-03-06
- EDB-44969 Nagios XI 5.2.6-5.4.12 - Chained Remote Code Execution (Metasploit) · remote · 2018-07-02
- EDB-44560 Nagios XI 5.2.6 < 5.2.9 / 5.3 / 5.4 - Chained Remote Root · webapps · 2018-04-30
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command
References
- gist.github.com /caleBot/f0a93b5a98574393e0139104eacc2d0f · x_refsource_MISC, x_transferred
- exploit-db.com /exploits/44560/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- nagios.com /downloads/nagios-xi/change-log/ · x_refsource_MISC, x_transferred
- blog.redactedsec.net /exploits/2018/04/26/nagios.html · x_refsource_MISC, x_transferred
- assets.nagios.com /downloads/nagiosxi/CHANGES-5.TXT · x_refsource_MISC, x_transferred
- exploit-db.com /exploits/44969/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
Sources
- CVE List: CVE-2018-8733
- NVD: CVE-2018-8733
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.