← Database

CVE-2022-29271

MEDIUM CVSS: 6.5 Published: 2022-06-29 Modified: 2026-06-17

Description

In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks.

Affected Platforms

Nagios Nagios Xi

Weakness Type

CWE-863

References