Beveiligingsadvies

CVE-2020-36867

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-30 21:37:09

Laatst bijgewerkt 2025-11-17 18:21:41

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF download/export functionality. User-supplied values used in the PDF generation pipeline or the wrapper that invokes offline/pdf helper utilities were insufficiently validated or improperly escaped, allowing an authenticated attacker who can trigger PDF exports to inject shell metacharacters or arguments.

← Alle CVE's bekijken Bekijk op cve.org ↗