The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an (a) custom form or a (b) browser addon.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade nagiosUpgrade nagios2 | Dec 10, 2025 | Jan 12, 2009 |
| Gentoo Linux | — | Upgrade net-analyzer/nagios-core. | Oct 30, 2017 | Nov 10, 2008 |
| Suse | — | Upgrade nagios-develUpgrade nagios-wwwUpgrade nagios | Dec 12, 2013 | Nov 10, 2008 |
| Ubuntu | — | Upgrade nagios2Upgrade nagios-commonUpgrade nagios3 | Nov 8, 2024 | Nov 10, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub