CVE-2019-20197

In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the…

published December 31, 2019

CVSS
—
EPSS
22%
Percentile
97.7
In the wild
Unconfirmed
What it is

In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.22404 · 97.7th percentile
Published
2019-12-31T18:50Z
EPSS history
Timeline
  • 31 DEC 18:50Z
    In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the…
    cvelistv5