CVE-2013-10072 | BDVDB-2026-300069 Detail
NagiosXI
Description#
Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality. Users with read-only roles could directly reach Auto-Discovery endpoints and pages that should require elevated permissions, exposing discovery results and allowing unintended access to discovery operations.
Impact#
Per CVSS v4.0: confidentiality impact high, integrity impact low, availability impact low. Attack vector: network.
Weaknesses#
- CWE-862 Missing Authorization
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.