CVE-2018-16145

The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited…

published September 5, 2018

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited by the nagios user, and would allow attackers to elevate their privileges to root after a system restart, hence obtaining full control of the appliance.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02308 · 83.1th percentile
Published
2018-09-05T21:00Z
EPSS history
Timeline
  • 05 SEP 21:00Z
    The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited…
    cvelistv5