Nagios Vulnerabilities

[btsmnagios]

There has been an article published on the 20th of May https://skylightcyber.com/2021/05/20/13 ... shock-you/, which identifies 13 vulnerabilities with NagiosXI and Fusion, are you able to comment on all 13 and confirm if they have been resolved and what version resolves them please, so that I can confirm to my security team that all these issues have been dealt with, thanks

[benjaminsmith]

Hi,

Those have been resolved ( or not exploitable) in version 5.7.5, but the article just came out recently. You'll find the vulnerabilities and remediation listed on our security page at:

https://www.nagios.com/products/security/

If you are not running the latest version (5.8.3), I would recommend upgrading as soon as possible and take advantage of the regular updates as they include important bug and security fixes.

Please let us know if you have further questions or need clarification on anything for your security team.

Best Regards,
Benjamin

[btsmnagios]

Thanks very much for the prompt response

[benjaminsmith]

Hi @btsmnagios,

Your welcome. Let us know if you have any other questions or if it's okay to close this topic.

Benjamin