CVE-2025-60425 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabled, allowing attack…
High CVSS: 8.6

CVE-2025-60425

Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabled, allowing attackers to perform a session hijacking attack.
Vendor
Nagios
Product
Fusion
CWE
CWE-491
Yayın Tarihi
2025-10-27 16:15:42
Güncelleme
2025-11-05 20:55:29
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-491 Fusion HIGH Nagios 2025

Referanslar

https://github.com/aakashtyal/Session-Persistence-After-Enabling-2FA https://github.com/aakashtyal/Session-Persistence-After-Enabling-2FA-CVE-2025-60425 https://www.nagios.com/changelog/#fusion