← Database

CVE-2021-37345

HIGH CVSS: 7.8 Published: 2021-08-13 Modified: 2026-07-09

Description

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is being imported from the var directory for some scripts with elevated permissions.

Affected Platforms

Nagios Nagios Xi

Weakness Type

CWE-269

References