PT-2023-7770 · Nagios · Nagios Xi

Publicado 2023-09-19 · Atualizado 2023-09-19 · CVE-2023-47405

Positive Technologies (AI Summary)

CVSS v2.0

1.4

Baixa

Vetor base

AV:L/AC:L/Au:M/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nagios XI (affected versions not specified)

Description The issue is related to the use of hardcoded credentials in a monitoring tool. Exploitation of this issue may allow an attacker to read, modify, or delete data, execute arbitrary code, or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2023-08837

CVE-2023-47405

Produtos afetados

Nagios Xi

Referências · 3

• https://nagios.com/changelog · Nota
• https://research.nccgroup.com/2023/12/13/technical-advisory-multiple-vulnerabilities-in-nagios-xi · Nota
• https://bdu.fstec.ru/vul/2023-08837 · Nota de Segurança