CVE-2020-28911

Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the…

published May 24, 2021

CVSS
—
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the test_server command in ajaxhelper.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03589 · 89.4th percentile
Published
2021-05-24T12:44Z
EPSS history
Timeline
  • 24 MAY 12:44Z
    Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the…
    cvelistv5