PT-2023-7770 · Nagios · Nagios Xi

Published 2023-09-19 · Updated 2023-09-19 · CVE-2023-47405

Positive Technologies (AI Summary)

CVSS v2.0

1.4

Low

Base vector

AV:L/AC:L/Au:M/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nagios XI (affected versions not specified)

Description The issue is related to the use of hardcoded credentials in a monitoring tool. Exploitation of this issue may allow an attacker to read, modify, or delete data, execute arbitrary code, or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2023-08837

CVE-2023-47405

Affected Products

Nagios Xi

References · 3

• https://bdu.fstec.ru/vul/2023-08837 · Security Note
• https://nagios.com/changelog · Note
• https://research.nccgroup.com/2023/12/13/technical-advisory-multiple-vulnerabilities-in-nagios-xi · Note