Security Advisory

CVE-2020-28910

9.8
CRITICAL

Vulnerability Description

Creation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows for Privilege Escalation via creation of symlinks, which are mishandled in getprofile.sh.
Published Date May 24, 2021
Official Source NIST NVD Advisory