ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-13977

PoC —
CVSS 3.1
4.9 medium
EPSS
3%p85
Published
()
Modified
Description

Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been mistakenly associated with CVE-2020-1408.

Vendors
nagiosfedoraproject
Products
nagios, fedora
Weakness
CWE-829
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news

No ingested article mentions this CVE yet.