Threats tagged 'ghsa-p92h-63r7-c5hj'

Nagios XI versions prior to 2024R2 have a command injection vulnerability in the WinRM plugin. This flaw allows an authenticated administrator to inject shell metacharacters into backend commands due to insufficient input validation. Exploiting this vulnerability can lead to arbitrary command execution with the privileges of the Nagios XI web application user, potentially enabling configuration changes, data exfiltration, disruption of monitoring, or execution of commands on the host OS.