High · published September 5, 2019
CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 99.6th percentile for exploit probability.
🚨 Remote command execution as root? Yes, please! Well, not for you. This vulnerability in Nagios XI before version 5.6.6 makes it alarmingly easy for bad actors to run commands with full root access if they can log in as the nagios user. 🔥 Think of it like a restaurant where the kitchen staff can access the vault of secret recipes without supervision. If someone sneaks in and changes those recipes, they can serve up whatever they want, jeopardizing the entire menu! An attacker exploiting this could literally execute any command they want with root privileges. This means they could wipe the entire system, steal sensitive data, or install backdoors for future attacks. The consequences could be absolutely devastating for any organization relying on Nagios XI.
Think of it like a restaurant where the kitchen staff can access the vault of secret recipes without supervision. If someone sneaks in and changes those recipes, they can serve up whatever they want, jeopardizing the entire menu! The vulnerability stems from the `getprofile.sh` script, which runs with root access via passwordless sudo when users download a system profile. If an attacker gains access as the nagios user, or through the web interface as an admin, they can modify the `check_plugin` executable to execute arbitrary commands as root.
An attacker exploiting this could literally execute any command they want with root privileges. This means they could wipe the entire system, steal sensitive data, or install backdoors for future attacks. The consequences could be absolutely devastating for any organization relying on Nagios XI. Immediately upgrade Nagios XI to version 5.6.6 or later to close this vulnerability. Review user permissions and restrict access to the nagios user, ensuring no unauthorized changes can be made to the plugins. Also, consider turning off passwordless sudo for the nagios user as an added layer of security. You've got this! Follow these steps and you'll be well on your way to securing your Nagios XI installation. 🛡️