Lucene search

K
cvelistMitreCVELIST:CVE-2020-28911
HistoryMay 24, 2021 - 12:44 p.m.

CVE-2020-28911

2021-05-2412:44:30
mitre
www.cve.org
5
nagios fusion
access control
low-privileged users
password extraction
test server command
ajaxhelper.php
cve-2020-28911

AI Score

7.2

Confidence

High

EPSS

0.022

Percentile

89.7%

Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the test_server command in ajaxhelper.php.

AI Score

7.2

Confidence

High

EPSS

0.022

Percentile

89.7%

Related for CVELIST:CVE-2020-28911