Threats tagged 'ghsa-fmr7-xm73-cwcf'

Nagios Log Server versions prior to 2024R2.0.3 contain a vulnerability where the embedded Logstash process runs with root privileges. This allows an attacker who compromises the Logstash process—via insecure plugins, pipeline configuration injection, or input parsing flaws—to execute code with root-level access, potentially leading to full system compromise. The issue is addressed by changing the Logstash service to run as a lower-privileged 'nagios' user.