CVE-2020-28910

Critical

Creation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows for Privilege Escalation via creation of…

mitre·CWE-732·Published 2021-05-24

CVSS

9.8

EPSS

0.04

KEV

Exploits

cve.orgen

187 chars

Creation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows for Privilege Escalation via creation of symlinks, which are mishandled in getprofile.sh.

NVDen

187 chars

Creation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows for Privilege Escalation via creation of symlinks, which are mishandled in getprofile.sh.

NVDes

252 chars

Una creación de un Directorio Temporal con Permisos No Seguros en Nagios XI versiones 5.7.5 y anteriores, permite una Escalada de Privilegios por medio de la creación de enlaces simbólicos, que son manejados inapropiadamente en el archivo getprofile.sh

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	10.0	10.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H