VULNERABILITY INTELLIGENCE

CVE-2021-3193

CVSS score9.8 CRITICAL
EPSS probability9.89%
CISA KEVNot currently listed
Published2021-01-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.7, allows an unauthenticated attacker to execute remote code as the apache user.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references