CVE-2023-48082
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Oct 14, 2024
Updated: Mar 13, 2025
CWE ID 79
Summary
CVE-2023-48082 is a vulnerability affecting Nagios XI versions prior to 2024R1. It involves an issue with API keys generation, which can result in the same set of keys being generated for multiple users. An attacker who successfully exploits this vulnerability can utilize these keys to authenticate unauthorized access to the Nagios XI system. This weakness could potentially lead to significant security implications if not addressed promptly. Users are advised to upgrade to the latest version of Nagios XI to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.