CVE-2023-37154
High
Description
check_by_ssh in Nagios nagios-plugins 2.4.5 allows arbitrary command execution via ProxyCommand, LocalCommand, and PermitLocalCommand with \${IFS}. This has been categorized both as fixed in e8810de, and as intended behavior.
SeverityHigh
CVSS8.4
Exploit probability—
ProductNagios Plugins
PublishedOct 9, 2024
First seenOct 9, 2024
Weakness typeCWE-77Command injection
How to fix
Update
- nagios plugins2.4.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nagios plugins | v < 2.4.5 | 2.4.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.