Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2023-7317

Nagios XI < 2024R1 Web SSH Terminal Missing Access Control

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, low-privileged attacker could access or interact with the terminal interface without sufficient authorization, potentially allowing unauthorized command execution or disclosure of sensitive information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nagios XI

Default version status: unaffected

  • 0 to < 2024R1affected

References