Multiple vulnerabilities in Nagios IT Monitoring Software could be exploited for infrastructure hijacking
Multiple vulnerabilities in Nagios IT Monitoring Software could be exploited for infrastructure hijacking
THREAT LEVEL: Amber.
For a detailed advisory, download the pdf file here.
Nagios fusion is an open-source IT monitoring application that could be exploited by a threat actor to hijack the complete infrastructure. 13 vulnerabilities have been reported in all its version up to 4.1.8.
Vulnerability Details
![](https://i0.wp.com/www.hivepro.com/wp-content/uploads/2021/05/Screenshot-2021-05-27-at-9.20.09-AM.png?resize=640%2C366&ssl=1)
Patch Links
https://www.nagios.com/downloads/nagios-xi/change-log/
References
https://securityaffairs.co/wordpress/118207/hacking/nagios-it-monitoring-flaws.html