CVE-2024-58273

Katalog CVE

CVSS 7.8 · High EPSS 0,28%

Kerentanan Incorrect Privilege Assignment pada nagios log server. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands as the Apache web user (or the backend shell user) to escalate to root on the host.

Rincian

Terbit di NVD

30 Oktober 2025

Terakhir diubah

2 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 19,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/nagios-log-server-lpe-from-apache-backend-shell-user-to-root advisory pihak ketiga
• https://www.nagios.com/changelog/#log-server-2024R1 release notes
• https://www.nagios.com/products/security/#log-server release notes