CVE-2025-34283 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user withou…
High CVSS: 7.1

CVE-2025-34283

Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges could view another user's or their own API key value.
Vendor
Nagios
Product
Nagios Xi
CWE
CWE-497
Yayın Tarihi
2025-10-30 22:15:48
Güncelleme
2025-11-06 18:14:36
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-497 Nagios Xi HIGH Nagios 2025

Referanslar

https://www.nagios.com/changelog/nagios-xi/ https://www.nagios.com/products/security/#nagios-xi https://www.vulncheck.com/advisories/nagios-xi-api-key-disclosure-via-neptune-themes