Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2019-9203: Nagios Incident Manager lets unauthorized users close alerts

CVE-2019-9203 · published 7 years ago

Summary

The Incident Manager component of Nagios XI allows anyone to send a request that marks an incident as resolved, even without proper permission. This can hide real problems and delay response. Upgrade to version 2.2.7 or later and restrict API access to trusted users.

What to do

Update nagios incident_manager to version 2.2.7 or later.

Affected software

Vendor	Product	Affected versions
nagios	incident_manager	< 2.2.7 `cpe:2.3:a:nagios:incident_manager::::::::`

Original advisory text

Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.

References

http://packetstormsecurity.com/files/152496/Nagios-XI-5.5.10-XSS-Remote-Code-Exe... Exploit Third Party Advisory VDB Entry
https://www.nagios.com/products/security/ Vendor Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Exploitation

20% chance of attack within 30 days

Timeline

Published28 Mar 2019

Updated29 Sep 2026

First seen29 Sep 2026

Sources

CVE-2019-9203 · NVD

Track software like this

Free during beta