Bug 1661478 (CVE-2018-18245)

Summary:	CVE-2018-18245 nagios: Stored XSS via Plugin Output
Product:	[Other] Security Response	Reporter:	Andrej Nemec <anemec>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	sisharma
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-10-27 03:20:41 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1661479, 1661480, 1662934
Bug Blocks:	1661481

Description Andrej Nemec 2018-12-21 10:37:40 UTC

A cross-site scripting (XSS) vulnerability has been discovered in Nagios Core. This vulnerability allows attackers to place malicious JavaScript code into the web frontend through manipulation of plugin output. In order to do this the attacker needs to be able to manipulate the output returned by nagios checks, e.g. by replacing a plugin on one of the monitored endpoints. Execution of the payload then requires that an authenticated user creates an alert summary report which contains the corresponding output.

References:

https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180026.txt

Comment 1 Andrej Nemec 2018-12-21 10:37:55 UTC

Created nagios tracking bugs for this issue:

Affects: epel-all [bug 1661480]
Affects: fedora-all [bug 1661479]

Comment 5 Jason Shepherd 2019-08-08 05:48:28 UTC

This vulnerability is out of security support scope for the following product:

 * Red Hat Mobile Application Platform

 Please refer to https://access.redhat.com/support/policy/updates/rhmap for more details