Detections
Analytics

Nagios XI < 2024R1 API Key Security

critical Nessus Plugin ID 209235

Language:

Synopsis

The remote host has a web application affected by a vulnerability.

Description

According to the self-reported version of Nagios XI, the remote host is affected by a vulnerability related to the generation of API keys. Nagios XI before 5.11.3 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade to Nagios XI 2024R1 or later.

See Also

https://www.nagios.com/downloads/nagios-xi/change-log/

https://www.nagios.com/products/security/

Plugin Details

Severity: Critical

ID: 209235

File Name: nagiosxi_2024r1.nasl

Version: 1.3

Type: combined

Agent: unix

Family: CGI abuses

Published: 10/17/2024

Updated: 10/18/2024

Configuration: Enable thorough checks

Supported Sensors: Nessus Agent, Nessus

Enable CGI Scanning: true

Risk Information

VPR

Risk Factor: Medium

Score: 6.0

CVSS v2

Risk Factor: Medium

Base Score: 6.4

Temporal Score: 4.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS Score Source: CVE-2023-48082

CVSS v3

Risk Factor: Critical

Base Score: 9.1

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:nagios:nagios_xi

Exploit Ease: No known exploits are available

Patch Publication Date: 12/16/2023

Vulnerability Publication Date: 10/14/2024

Reference Information

CVE: CVE-2023-48082

IAVB: 2024-B-0155