Lucene search
PRIOn knowledge basePRION:CVE-2018-16146HistorySep 05, 2018 - 9:29 p.m.
Command injection
2018-09-0521:29:00
PRIOn knowledge base
www.prio-n.com
7
The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test notifications that are triggered under certain configurable events. The value parameter is not properly sanitized, leading to arbitrary command injection with the privileges of the nagios user account.
Related
nvd
nvd
CVE-2018-16146
2018-09-05 21:29:02
cvelist
cvelist
CVE-2018-16146
2018-09-05 21:00:00
cve
cve
CVE-2018-16146
2018-09-05 21:29:02
threatpost
threatpost
Multiple Remote Code-Execution Flaws Patched in Opsview Monitor
2018-09-04 20:21:15
coresecurity
coresecurity
Opsview Monitor Multiple Vulnerabilities
2018-09-04 00:00:00
packetstorm
packetstorm
Opsview Monitor 5.x Command Execution
2018-09-05 00:00:00