{"metadata": {"vulnerability": "cve-2020-28910", "count": 17, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2020-11-17T00:00:00Z", "date_only": false, "value": "2020-11-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-28910", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-05-24T12:44:15Z", "date_only": false, "value": "2021-05-24T12:44:15.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-28910", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-05-24T13:15:00Z", "date_only": false, "value": "2021-05-24T13:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J8R2-C848-HX5V", "record": "GHSA-J8R2-C848-HX5V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-05-24T13:15:00Z", "date_only": false, "value": "2021-05-24T13:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-28910", "record": "GSD-2020-28910", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-05-24T13:15:08.167Z", "date_only": false, "value": "2021-05-24T13:15:08.167", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-28910", "record": "FKIE_CVE-2020-28910", "field": "published"}, {"timestamp": "2021-05-24T20:42:39Z", "date_only": false, "value": "2021-05-24T20:42:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ss44dfktnvBrSYmi5h3Hi4YxlnzSVf_TwVt3ct0JZrIkPN4", "record": "CVE-2020-28910", "field": "creation_timestamp", "uuid": "220b61ab-87b8-47bc-b932-f079f1fc4cd1"}, {"timestamp": "2021-05-26T00:00:00Z", "date_only": true, "value": "2021-05-26", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-37147", "record": "CNVD-2021-37147", "field": "openTime"}, {"timestamp": "2021-05-26T00:00:00Z", "date_only": true, "value": "2021-05-26", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-37147", "record": "CNVD-2021-37147", "field": "submitTime"}, {"timestamp": "2021-05-26T19:06:20Z", "date_only": false, "value": "2021-05-26T19:06:20.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2020-28910", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-05-27T17:17:10Z", "date_only": false, "value": "2021-05-27T17:17:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/42", "record": "CVE-2020-28910", "field": "creation_timestamp", "uuid": "fbf5df5e-e739-4869-8eaf-f5087e1f1af1", "content": "\"13 Nagios Vulnerabilities, #7 will SHOCK you!\" by Samir Ghanem\n\nGaining access to Nagios XI server results in upstream compromise of management server,  i.e. every other customer monitored. Exploitation facilitated with soygun tool.\n\nContents:\n \u2022 TL;DR\n \u2022 Why Nagios?\n \u2022 What is Nagios?\n \u2022 The Code\n \u2022 Challenge Accepted\n \u2022 What are we trying to achieve?\n \u2022 Step 1: RCE on Nagios XI server from low privilege Nagios XI user (CVE-2020-28648)\n \u2022 Step 2: Elevate privileges to \u2018root\u2019 on Nagios XI server (CVE-2020-28910)\n \u2022 Step 3: Trigger XSS by tainting data returned to Nagios Fusion from XI (CVE-2020-28903)\n \u2022 Step 4: Authenticated remote code execution on Nagios Fusion (CVE-2020-28905)\n \u2022 Step 5: Elevate privileges from apache to root using the \u2018cmd_subsys.php\u2019 (CVE-2020-28902)\n \u2022 Step 6: Get list of \u201cfused\u201d XI servers and exploit them using Step 1 and 2\n \u2022 PoC or Attack Platform\n \u2022 SoyGun\n \u2022 Command & Control (C2)\n \u2022 SoyGun Implant\n \u2022 DeadDrop\n \u2022 Demo\n \u2022 Disclosure and Afterthoughts\n \u2022 Full Vulnerabilities List\n\nhttps://skylightcyber.com/2021/05/20/13-nagios-vulnerabilities-7-will-shock-you/", "url": "https://t.me/ptswarm/42"}, {"timestamp": "2021-05-28T14:54:00Z", "date_only": false, "value": "2021-05-28T14:54Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-28910", "record": "GSD-2020-28910", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T19:03:06Z", "date_only": false, "value": "2022-05-24T19:03:06Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J8R2-C848-HX5V", "record": "GHSA-J8R2-C848-HX5V", "field": "published"}, {"timestamp": "2022-07-13T00:00:50Z", "date_only": false, "value": "2022-07-13T00:00:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J8R2-C848-HX5V", "record": "GHSA-J8R2-C848-HX5V", "field": "modified"}, {"timestamp": "2023-12-13T01:22:01.756Z", "date_only": false, "value": "2023-12-13T01:22:01.756264Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-28910", "record": "GSD-2020-28910", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T16:41:00.310Z", "date_only": false, "value": "2024-08-04T16:41:00.310Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-28910", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T16:41:00.310Z", "date_only": false, "value": "2024-08-04T16:41:00.310Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-28910", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:10:48.753Z", "date_only": false, "value": "2026-06-17T03:10:48.753", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-28910", "record": "FKIE_CVE-2020-28910", "field": "lastModified"}]}