Nagios XI Highcharts Export Directory Permission Vulnerability

A vulnerability exists in Nagios XI versions prior to 5.8.7, where a temporary directory used for Highcharts exports had overly permissive ownership and permissions under the Apache user. This flaw allowed local or co-hosted processes to read or overwrite export artifacts, manipulate paths, and potentially execute code, depending on the deployment.

Impact

According to Nagios, this vulnerability could lead to unauthorized disclosure or tampering of data, with a risk of code execution under certain conditions.

Remediation

Users can upgrade to Nagios XI version 5.8.7 or later to address this vulnerability.