CVE-2018-16146

The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test notifications that…

published September 5, 2018

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test notifications that are triggered under certain configurable events. The value parameter is not properly sanitized, leading to arbitrary command injection with the privileges of the nagios user account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06197 · 93.5th percentile
Published
2018-09-05T21:00Z
EPSS history
Timeline
  • 05 SEP 21:00Z
    The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test notifications that…
    cvelistv5