CVE-2018-15710 is a privilege escalation vulnerability in Nagios XI version 5.5.6, allowing a local authenticated attacker to gain root privileges through the Autodiscover_new.php script. This vulnerability carries a high CVSSv3 score of 7.8, indicating a significant risk with high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, public exploit code exists, including a Metasploit module, suggesting potential for exploitation. Despite the availability of exploits, there is no evidence of active exploitation or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.5.6CPE matchmatch criteria | cpe:2.3:a:nagios:nagios_xi:5.5.6:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.