CVE Details: CVE-2023-48082

Description

Nagios XI before 5.11.3 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate.

Published Date: 2024-10-14
Last Modified Date: 2024-10-15
Severity:
CVSS v3 Score:
CWE ID:
Attack Vector:
Attack Complexity:
Privileges Required:
User Interaction:
Scope:
Confidentiality Impact:
Integrity Impact:
Availability Impact:

Back to CVE List