CVE-2018-15711

Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users

published November 14, 2018

CVSS
—
EPSS
36%
Percentile
98.5
In the wild
Unconfirmed
What it is

Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users. The attacker can then use the new API key to execute API calls at elevated privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.36012 · 98.5th percentile
Published
2018-11-14T18:00Z
EPSS history
Timeline
  • 22 SEP 03:15Z
    EPSS moved 36% → 22%
    epss
  • 06 SEP 03:11Z
    EPSS moved 36% → 22%
    epss
  • 30 AUG 16:00Z
    EPSS moved 22% → 36%
    epss
  • 29 AUG 04:34Z
    EPSS moved 36% → 22%
    epss
  • 14 NOV 18:00Z
    Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users
    cvelistv5