Nagios XI Local Elevation of Privilege Vulnerability (CNVD-2021-90916)

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting, and rich data visualization.A local elevation of privilege vulnerability exists in versions of Nagios XI prior to 5.8.5. The vulnerability stems from the fact that getprofile.sh does not validate the name of the directory received as a parameter. No detailed vulnerability details are currently available.