Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-12279

Nagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the reset password form). NOTE: The vendor disputes this issues as not being a vulnerability because the issue does not seem to be a legitimate SQL Injection. The POC does not show any valid injection that can be done with the variable provided, and while the username value being passed does get used in a SQL query, it is passed through SQL escaping functions when creating the call. The vendor tried re-creating the issue with no luck

Published

2019-05-22T16:29:01.447

Last Modified

2024-11-21T04:22:33.243

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
CWE-89

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	nagios	nagios_xi	5.6.1	Yes

References

http://packetstormsecurity.com/files/153040/Nagios-XI-5.6.1-SQL-Injection.html ([email protected])
http://www.securityfocus.com/bid/108446 ([email protected])
https://github.com/JameelNabbo/exploits/blob/master/nagiosxi%20username%20sql%20injection.txt Exploit, Third Party Advisory ([email protected])
http://packetstormsecurity.com/files/153040/Nagios-XI-5.6.1-SQL-Injection.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/108446 (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/JameelNabbo/exploits/blob/master/nagiosxi%20username%20sql%20injection.txt Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)