Description (CNA)
Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands as the Apache web user (or the backend shell user) to escalate to root on the host.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Nagios / Log Server | affected 0 before 2024R1.0.2 |
CWE
CWE-266
References
- https://www.nagios.com/products/security/#log-server
- https://www.nagios.com/changelog/#log-server-2024R1
- https://www.vulncheck.com/advisories/nagios-log-server-lpe-from-apache-backend-shell-user-to-root
ADP enrichment
No English description supplied.
No references supplied.