Wind River Support Network

HomeDefectsLIN1018-3211

Fixed

LIN1018-3211 : Security Advisory - nagios-core - CVE-2018-18245

Created: Dec 19, 2018 Updated: Mar 27, 2019

Resolved Date: Mar 17, 2019

Found In Version: unknown

Fix Version: 10.18.44.5

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check_load plugin to NRPE.

https://nvd.nist.gov/vuln/detail/CVE-2018-18245

CVEs

CVE-2018-18245