In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys.

Published Jul 22, 2020 · Updated Aug 4, 2024 · Assigned by mitre