PT-2023-7788 · Nagios Xi · Nagios Xi

Published 2023-09-19 · Updated 2023-09-19 · CVE-2023-47402

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nagios XI (affected versions not specified)

Description The issue is related to the Inbound/Outbound Transfer function of the Nagios XI monitoring tool. It involves the unencrypted storage of critical information in the xi options database table. This could allow a remote attacker to gain unauthorized access to sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

BDU:2023-08855

CVE-2023-47402

Affected Products

Nagios Xi

References · 3

• https://bdu.fstec.ru/vul/2023-08855 · Security Note
• https://nagios.com/changelog · Note
• https://research.nccgroup.com/2023/12/13/technical-advisory-multiple-vulnerabilities-in-nagios-xi · Note