Skip to content
OpenAdvisories
Unscored CVE-2018-15711 EUVD-2018-7581GHSA-w945-wc2v-qq8w

Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users. The attacker can then u…

Published Nov 14, 2018 · Updated Sep 17, 2024 · Assigned by tenable

Vendor: Nagios Product: Nagios XI

Description

Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users. The attacker can then use the new API key to execute API calls at elevated privileges.

Affected products

VendorProductAffectedFixed
Nagios Nagios XI 5.5.6 —

References