CVE-2021-37351

—

CVSS 3.1

5.3 medium

EPSS

3%p86

Published

Aug 13, 2021 (Aug 13, 2021)

Modified

Jun 17, 2026

Description

Nagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated users to access guarded pages through a crafted HTTP request to the server.

Vendors: nagios
Products: nagios xi
Weakness: CWE-276
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news2 stories

New Nagios Software Bugs Could Let Hackers Take Over IT Infrastructures

The Hacker NewsSep 27, 04:39 UTC · Sep 27, 2021Exploit / PoC CVE-2021-37344 CVE-2021-37346 CVE-2021-37350+8 CVEs1

Flaws in Nagios Network Management systems pose risk to companies

Security AffairsSep 22, 15:08 UTC · Sep 22, 2021Exploit / PoC CVE-2021-37353 CVE-2021-37352 CVE-2021-37351+8 CVEs