VULNERABILITY INTELLIGENCE

CVE-2008-5027

CVSS score6.5 MEDIUM
EPSS probability6.74%
CISA KEVNot currently listed
Published2008-11-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an (a) custom form or a (b) browser addon.

Primary references