Privilege Escalation Vulnerability in Nagios NDOUtils
CVE-2024-43199

7.8HIGH

Key Information:

Vendor

NagiOS

Status
Ndoutils
Vendor
CVE Published:
7 August 2024

What is CVE-2024-43199?

A vulnerability exists in Nagios NDOUtils versions prior to 2.1.4 that allows for privilege escalation from the 'nagios' user to the root user. This is due to certain executable files being improperly owned by the 'nagios' user, which can lead to unauthorized access and potential compromise of system integrity. Users of affected versions are advised to upgrade to version 2.1.4 or later to mitigate the risks associated with this vulnerability.

References

https://github.com/NagiosEnterprises/ndoutils/pull/65
https://github.com/NagiosEnterprises/ndoutils/commit/18ef...
https://github.com/NagiosEnterprises/ndoutils/compare/ndo...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.