CVE-2018-15711

Description

Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users. The attacker can then use the new API key to execute API calls at elevated privileges.

References

https://www.tenable.com/security/research/tra-2018-37

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-7581

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS