Stay Secure with the Latest Linux Advisories

security advisorycriticalremote access

Mageia 7: 2021-0209 Critical: Nagios Remote Access Vulnerability Fix

Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files (CVE-2020-13977). . MGASA-2021-0209 - Updated nagios packages fix a security vulnerability Publication date: 12 May 2021 URL: https://advisories.mageia.org/MGASA-2021-0209.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-13977 Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files (CVE-2020-13977). References: - https://bugs.mageia.org/show_bug.cgi?id=28557 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/JUEIABR4Y6L5J5MZDFWU46ZWXMJO64U3/ - https://www.cve.org/CVERecord?id=CVE-2020-13977 SRPMS: - 7/core/nagios-4.4.3-2.1.mga7 . The security update for Nagios version 4.4.5 resolves the vulnerability identified as CVE-2020-13977 that impacts Mageia 7. Learn more about this issue.. Nagios Update, Mageia Security, Remote Access Fix, Update Announcement. . Severity: Critical. LinuxSecurity.com Team

May 12, 2021 •Critical Mageia