CVE-2021-37345

Publication date

2021-08-13 11:32:09

Family

mitre

State

PUBLISHED

Description

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is being imported from the var directory for some scripts with elevated permissions.