CVE-2025-28132 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse session tokens even after a user logs out, leading to unauthorized a…
Medium CVSS: 4.6

CVE-2025-28132

A session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse session tokens even after a user logs out, leading to unauthorized access and account takeover. This occurs due to insufficient session expiration, where session tokens remain valid beyond logout, allowing an attacker to impersonate users and perform actions on their behalf.
Vendor
Nagios
Product
Nagios Network Analyzer
CWE
CWE-613
Yayın Tarihi
2025-04-01 17:15:46
Güncelleme
2025-06-18 13:59:16
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

Referanslar