CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: the /etc/init.d/opsview-reporting-module script that runs at boot time in opsview monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited by the nagios user, and would allow attackers to elevate their privileges to root after a system restart, hence obtaining full control of the appliance.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-09-05
Last Modified Date: 2019-10-03