Vulnerabilities > CVE-2021-37348 - Files or Directories Accessible to External Parties vulnerability in Nagios XI

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
nagios
CWE-552
NVD
Published: 2021-08-13
Updated: 2021-08-23

Summary

Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.php.

Vulnerable Configurations

Part Description Count
Application
Nagios
65

Common Weakness Enumeration (CWE)

References