Vulnerability · Published Jun 29, 2022 · Assigned by mitre
CVE-2022-29270
Medium 4.3
In plain English
A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.5% (higher than 89% of all known vulnerabilities).
Severity (CVSS NVD)4.3Medium
Exploit odds (30 days)3.5%top 10.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address.
Affected products (as reported)
References
- https://www.nagios.com/downloads/nagios-xi/change-log/ x_refsource_MISC
- https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT x_refsource_MISC
- https://github.com/4LPH4-NL/CVEs x_refsource_MISC
- https://github.com/sT0wn-nl/CVEs/blob/master/README.md#nagios-xi x_refsource_MISC