← Database

CVE-2021-37347

HIGH CVSS: 7.8 Published: 2021-08-13 Modified: 2026-06-17

Description

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh does not validate the directory name it receives as an argument.

Affected Platforms

Nagios Nagios Xi

Weakness Type

CWE-22

References