Total vulnerabilities in the database
Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the test_server command in ajaxhelper.php.
| Software | From | Fixed in |
|---|---|---|
| nagios / fusion | - | 4.1.8.x |