CVE-2022-29271

In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime for any host/services

published June 29, 2022

CVSS
—
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01997 · 80.6th percentile
Published
2022-06-29T00:58Z
EPSS history
Timeline
  • 29 JUN 00:58Z
    In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime for any host/services
    cvelistv5