Oval Definition:	oval:org.opensuse.security:def:202013977
Revision Date: 2022-06-30 Version: 1 Title: CVE-2020-13977 Description: Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been mistakenly associated with CVE-2020-1408. Family: unix Class: vulnerability Status: Reference(s): Mitre CVE-2020-13977 SUSE CVE-2020-13977 openSUSE-SU-2021:0715-1 openSUSE-SU-2021:0735-1 Platform(s): openSUSE Leap 15.2 openSUSE Tumbleweed SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Package Hub for SUSE Linux Enterprise 15 SP1 SUSE Package Hub for SUSE Linux Enterprise 15 SP2 Product(s): Definition Synopsis openSUSE Tumbleweed is installed AND Package Information nagios-4.4.6-2.5 is installed OR nagios-contrib-4.4.6-2.5 is installed OR nagios-devel-4.4.6-2.5 is installed OR nagios-theme-exfoliation-4.4.6-2.5 is installed OR nagios-www-4.4.6-2.5 is installed OR nagios-www-dch-4.4.6-2.5 is installed Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed AND Package Information nagios-4.4.6-bp151.4.6.1 is installed OR nagios-contrib-4.4.6-bp151.4.6.1 is installed OR nagios-devel-4.4.6-bp151.4.6.1 is installed OR nagios-theme-exfoliation-4.4.6-bp151.4.6.1 is installed OR nagios-www-4.4.6-bp151.4.6.1 is installed OR nagios-www-dch-4.4.6-bp151.4.6.1 is installed Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed AND Package Information nagios-4.4.6-bp152.2.3.1 is installed OR nagios-contrib-4.4.6-bp152.2.3.1 is installed OR nagios-devel-4.4.6-bp152.2.3.1 is installed OR nagios-theme-exfoliation-4.4.6-bp152.2.3.1 is installed OR nagios-www-4.4.6-bp152.2.3.1 is installed OR nagios-www-dch-4.4.6-bp152.2.3.1 is installed Definition Synopsis Release Information SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed AND nagios-4.4.6-bp152.2.3.1 is installed OR nagios-contrib-4.4.6-bp152.2.3.1 is installed OR nagios-devel-4.4.6-bp152.2.3.1 is installed OR nagios-theme-exfoliation-4.4.6-bp152.2.3.1 is installed OR nagios-www-4.4.6-bp152.2.3.1 is installed OR nagios-www-dch-4.4.6-bp152.2.3.1 is installed OR Package Information SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed AND nagios-4.4.6-bp151.4.6.1 is installed OR nagios-contrib-4.4.6-bp151.4.6.1 is installed OR nagios-devel-4.4.6-bp151.4.6.1 is installed OR nagios-theme-exfoliation-4.4.6-bp151.4.6.1 is installed OR nagios-www-4.4.6-bp151.4.6.1 is installed OR nagios-www-dch-4.4.6-bp151.4.6.1 is installed Definition Synopsis openSUSE Leap 15.2 is installed AND Package Information nagios-4.4.6-lp152.2.3.1 is installed AND nagios is signed with openSUSE key OR nagios-contrib-4.4.6-lp152.2.3.1 is installed AND nagios-contrib is signed with openSUSE key OR nagios-devel-4.4.6-lp152.2.3.1 is installed AND nagios-devel is signed with openSUSE key OR nagios-theme-exfoliation-4.4.6-lp152.2.3.1 is installed AND nagios-theme-exfoliation is signed with openSUSE key OR nagios-www-4.4.6-lp152.2.3.1 is installed AND nagios-www is signed with openSUSE key OR nagios-www-dch-4.4.6-lp152.2.3.1 is installed AND nagios-www-dch is signed with openSUSE key
BACK