Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.
Metrics
Affected Vendors & Products
References
History
Tue, 04 Feb 2025 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
kev
|

Status: PUBLISHED
Assigner: mitre
Published: 2021-02-15T00:00:00.000Z
Updated: 2025-02-04T19:46:54.918Z
Reserved: 2021-01-18T00:00:00.000Z
Link: CVE-2021-25297

Updated: 2024-08-03T19:56:11.178Z

Status : Modified
Published: 2021-02-15T13:15:12.793
Modified: 2025-02-04T20:15:40.267
Link: CVE-2021-25297

No data.