Security Advisory
CVE-2021-37347
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh does not validate the directory name it receives as an argument.