More information about this CVE will likely be available in a few days

Description

Nagios XI before 5.11.3 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate.

Related CPE's

Could not find any relations

References

https://www.nagios.com/change-log/

Weaknesses

Could not find any weaknesses

CVSS impact metrics

Could not find any metrics

Information

Source identifier

[email protected]

Vulnerability status

Received

Published

2024-10-14T19:15:10.780

4 months ago

Last modified

2024-10-14T19:15:10.780

4 months ago