Page 1 of 1

CVE for latest release 5.6.8

Posted: Wed Nov 06, 2019 1:50 am
by netgroup
Hi,
I noticed in the changelog for release 5.6.8 that you fixed several security vulnerabilitites but there seems to be missing a CVE for the vulnerabilities. I can't see them on your Disclosed Vulnerabilities page with a reference to a CVE?
https://www.nagios.com/products/security/

"Fixed multiple security vulnerabilities that allowed nagios user command injections (thanks Jeremy Brown) -JO"

Re: CVE for latest release 5.6.8

Posted: Wed Nov 06, 2019 11:30 am
by benjaminsmith
Hello,

Good question. There wasn't specific CVE's filed for those vulnerabilities fixes.

Let us know if you have further questions.