CVE-2025-34270 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the AD/LDAP user import functionality as it fails to obfuscate the password field duri…
Medium CVSS: 6.9

CVE-2025-34270

Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the AD/LDAP user import functionality as it fails to obfuscate the password field during import. As a result, the plaintext password supplied for imported accounts may be exposed in the user interface, logs, or other diagnostic output. This can leak sensitive credentials to administrators or anyone with access to import results.
Vendor
Nagios
Product
Log Server
CWE
CWE-312
Yayın Tarihi
2025-10-30 22:15:47
Güncelleme
2025-11-06 16:31:27
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-312 Log Server MEDIUM Nagios 2025

Referanslar

https://support.nagios.com/kb/article/authenticating-and-importing-users-with-ad-and-ldap-995.html https://www.nagios.com/changelog/#log-server https://www.nagios.com/products/security/#log-server-2024R2 https://www.vulncheck.com/advisories/nagios-log-server-ad-ldap-import-password-not-obfuscated