CVE:CVE-2020-13977
CNNVD:CNNVD-202006-743
Nagios是美国Nagios公司的一套开源的免费网络监视工具。
Nagios 4.4.5版本中存在注入漏洞。攻击者可通过修改的archive.json、objectjson.cgi和statusjson.cgi利用该漏洞修改警报直方图和趋势功能代码。
solution:Upgrade nagios nagios to a higher version than 4.4.5,and avoid the version 4.4.5; Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34