In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-06-29T00:58:46

Updated: 2024-08-03T06:17:54.507Z

Reserved: 2022-04-15T00:00:00

Link: CVE-2022-29271

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-06-29T01:15:07.503

Modified: 2024-11-21T06:58:50.650

Link: CVE-2022-29271

cve-icon Redhat

No data.