[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvFBa6-AveopQvkJWYbKCFR-LjfHNv038h4x4E6Dk2qA":3,"g5a-risk:CVE-2020-28911":132},{"success":4,"data":5,"meta":130},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":68,"weaknesses":69,"weaknessesCount":49,"isActivelyExploited":78,"cisaInfo":27,"otxData":27,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":114,"notableEvents":115},"CVE-2020-28911","What is CVE-2020-28911?","Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the test_server command in ajaxhelper.php.","Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via t...","2021-05-24T13:15:08.313","2021-06-03T16:19:46.213",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":35,"ConfidentialityImpact":36,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.03589,[40,40,40,40,40,40,40],"Medium",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"nagios","fusion","*","cpe:2.3:a:nagios:fusion:*:*:*:*:*:*:*:*",1,[51,57,62],{"url":52,"source":53,"tags":54},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F162783\u002FNagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html","Packetstormsecurity",[55,56],"Third Party Advisory","VDB Entry",{"url":58,"source":59,"tags":60},"https:\u002F\u002Fskylightcyber.com\u002F2021\u002F05\u002F20\u002F13-nagios-vulnerabilities-7-will-shock-you\u002F","Skylightcyber",[61,55],"Exploit",{"url":63,"source":64,"tags":65},"https:\u002F\u002Fwww.nagios.com\u002Fdownloads\u002Fnagios-xi\u002Fchange-log\u002F","Nagios",[66,67],"Release Notes","Vendor Advisory",3,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-922","Insecure Storage of Sensitive Information","The product stores sensitive information without properly limiting read or write access by unauthorized actors.","If read access is not properly restricted, then attackers can steal the sensitive information. If write access is not properly restricted, then attackers can modify and possibly delete the data, causing incorrect results and possibly a denial of service.","Incomplete","Class","Simple",false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2020-28911? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-28911, a medium severity cyber security vulnerability from 2021. Incorrect Access Control in Nagios Fusion 4.1.8 and earli...","CVE-2020-28911, CVE-2020-28911 vulnerability, CVE-2020-28911 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, nagios security, fusion vulnerability","\u002Fwhat-is\u002Fcve-2020-28911",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-28911","Cybersecurity","CVE-2020-28911, CVE-2020-28911 vulnerability, CVE-2020-28911 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":27,"Negate":27,"Nodes":107},[108],{"Operator":109,"Negate":27,"CPEMatch":110},"OR",[111],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":112,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":113},"733C0375-EFE2-43AF-9C99-4A50322D1B09","4.1.8",[],[116,123],{"id":117,"eventType":118,"eventTime":119,"details":120,"label":121,"color":122},"755e4555-8db7-4b61-ada8-f875393f5fe5","HIGH_EPSS_DELTA","2025-09-29T04:06:21.693908+00:00","Daily EPSS score increased by 0.122 on 2023-12-30","EPSS Score Increased","red",{"id":124,"eventType":125,"eventTime":126,"details":127,"label":128,"color":129},"913a68d5-ad39-404c-b8c7-095d1999cc1b","LOW_EPSS_DELTA","2026-06-16T04:05:50.7604+00:00","Daily EPSS score decreased by 0.140 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":131,"version":33},1792372937779,{"score":133,"band":42,"action":134,"scoredAt":135},45,"Plan remediation","2026-10-16T06:51:10.431674+00:00"]