HTTP: Nagios XI Autodiscovery Job Command Injection (1)

This signature detects attempts to exploit a known vulnerability against Autodiscovery Job component of Nagios XI. The vulnerability is due to insufficient validation of parameters submitted when creating a new autodiscovery job. A remote, authenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitation could result in the execution of arbitrary code as the apache user.

Short Name

HTTP:NAGIOSXI-CND-INJ-JOB-1

Severity

Major

Recommended

False

Recommended Action

None

HTTP: Nagios XI Autodiscovery Job Command Injection (1)

Found a potential security threat?