CVE-2020-35578

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0

published January 13, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS
—
EPSS
82%
Percentile
99.7
In the wild
Unconfirmed
What it is

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload, a remote, authenticated admin user can execute operating-system commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.81915 · 99.7th percentile
Published
2021-01-13T20:19Z
EPSS history
Timeline
  • 13 JAN 20:19Z
    An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0
    cvelistv5