ERNW is an independent IT Security service provider based in Heidelberg, Germany. Since its founding in 2001, our focus has been on consulting and testing in all areas of IT security, unallied from outside shareholders and a need to sell products. This independence and self-accountability drives us, as a company, to adhere to a higher standard of professional conduct and development.
Get the latest Informations about technical topics within the IT-Security Community and a lot of special insights. Sign up now for our Whitepaper Newsletter:
Thank you for signing up! You’ll receive a notification from out mailinglist manager to finally opt you in.
In June 2020 we reported three vulnerabilities in Nagios XI 5.7.1 to the vendor. The following CVE IDs were assigned to the issues : CVE-2020-15901: Command Injection in Nagios XI web interface (RCE) CVE-2020-15902: Cross Site Scripting (XSS) CVE-2020-15903: Reserved, details will be given on vendor fix CVE-2020-15901 and CVE-2020-15902 have meanwhile been fixed in […]