Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5.7.5 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to an untrusted update package to upgrade_to_latest.sh.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Nagios 数据伪造问题漏洞
Vulnerability Description
Nagios是美国Nagios公司的一套开源的免费网络监视工具。 Nagios Fusion 4.1.8版本及之前和Nagios XI 5.7.5版本之前存在安全漏洞，该漏洞源于程序中的数据真实性验证不足，允许以根用户身份通过与不受信任的更新包相关的向量升级到最新版本。
CVSS Information
N/A
Vulnerability Type
N/A