Security Advisory

CVE-2022-29271

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-06-29 00:58:46
Last updated 2024-08-03 06:17:54
Assigner mitre
State PUBLISHED

Description

In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks.