The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under /usr/local/groundwork, which allows context-dependent attackers to bypass intended filesystem restrictions by leveraging access to a GroundWork script.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Groundwork_monitor | Gwos | 6.7.0 (including) | 6.7.0 (including) |