CVE-2020-5791

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute operating system commands with the privileges of the apache user.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
n/a	Nagios XI	5.7.3

References

http://packetstormsecurity.com/files/159743/Nagios-XI-5.7.3-Remote-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/162235/Nagios-XI-5.7.3-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
https://www.tenable.com/security/research/tra-2020-58Exploit, Third Party Advisory
http://packetstormsecurity.com/files/159743/Nagios-XI-5.7.3-Remote-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/162235/Nagios-XI-5.7.3-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
https://www.tenable.com/security/research/tra-2020-58Exploit, Third Party Advisory

Timeline

Published: Oct 20, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-57927.2Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitra CVE-2020-57937.8A vulnerability in Nessus versions 8.9.0 through 8.12.0 for Windows & Nessus Agent 8.0.0 and 8.1.0 for Windows could allow an authenticated CVE-2020-57947.8A vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could allow an authenticated local attacker to exe CVE-2020-57956.2UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physical access and netwo CVE-2020-57967.8Improper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged, authenticated user to weaken the permissions of file CVE-2020-57976.1UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an unauthenticated actor, with physical access and CVE-2020-57987.8inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user from a lower privilege CVE-2020-57999.8The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restric CVE-2020-58009.8The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify info CVE-2020-58017.5An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDMana CVE-2020-58027.5An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted Configure CVE-2020-58038.1Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete arbitrary files on disk a