Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been mistakenly associated with CVE-2020-1408.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-06-09T13:06:56
Updated: 2024-08-04T12:32:14.607Z
Reserved: 2020-06-09T00:00:00
Link: CVE-2020-13977
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-06-09T14:15:10.063
Modified: 2023-11-07T03:17:04.647
Link: CVE-2020-13977
Redhat
No data.