Description (CNA)
The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability. Exploitation of this results in a malicious actor having the ability to arbitrarily delete files on the local system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NagVis / NagVis | affected <1.9.29 |
CWE
CWE-22
References
- https://www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi
- https://nagvis.org/downloads/changelog/1.9.29
ADP enrichment
No English description supplied.