Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2018-25123

Nagios XI < 5.5.7 Privilege Escalation via MRTG Graphing Component

Description

Nagios XI versions prior to 5.5.7 contain a privilege escalation vulnerability in the MRTG graphing component. MRTG-related processes/scripts executed with excessive privileges, allowing a local attacker with limited system access to abuse file/command execution paths or writable resources to gain elevated privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nagios XI

Default version status: unaffected

  • 0 to < 5.5.7affected

References