ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-28900”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-28900
Published
2021-05-24
CVSS:
9.8
ShadowTrackr CVSS:
7.2
Summary:
Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5.7.5 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to an untrusted update package to upgrade_to_latest.sh.