CVE-2018-16145

CVE-2018-16145 is a privilege escalation vulnerability affecting Opsview Monitor versions before 5.3.1 and 5.4.x before 5.4.2. An attacker could exploit a flaw in the /etc/init.d/opsview-reporting-module script, which runs at boot, by modifying a file editable by the nagios user. This allows them to elevate privileges to root upon system restart, gaining full control of the appliance. This vulnerability is rated as High severity (CVSS 8.1), indicating a critical risk. It has a network attack vector and high impact on confidentiality, integrity, and availability, though it requires high attack complexity. There is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit or ExploitDB. However, it has garnered some community discussion and media coverage, suggesting awareness within the cybersecurity community.