CVE-2021-37347

Publication date

2021-08-13 11:30:39

Family

mitre

State

PUBLISHED

Description

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh does not validate the directory name it receives as an argument.