What is GHSA-rm28-5q5x-9xwv?

GHSA-rm28-5q5x-9xwv is a security advisory published by GitHub Security Advisories with High severity. Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is...

Which CVE IDs does GHSA-rm28-5q5x-9xwv cover?

GHSA-rm28-5q5x-9xwv covers the following CVE IDs: CVE-2021-37345. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rm28-5q5x-9xwv?

GHSA-rm28-5q5x-9xwv has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-rm28-5q5x-9xwvHighCVSS 7.8

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2021-37345 →

📋 Description

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is being imported from the var directory for some scripts with elevated permissions.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-37345
http://nagios.com
https://www.nagios.com/downloads/nagios-xi/change-log
https://github.com/advisories/GHSA-rm28-5q5x-9xwv