CVE-2025-44823
Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL:NLS#475.
| Software | From | Fixed in |
|---|---|---|
| nagios / log_server | - | 2024 |
| nagios / log_server | 2024-r1 | 2024-r1.x |
| nagios / log_server | 2024-r1.0.1 | 2024-r1.0.1.x |
| nagios / log_server | 2024-r1.0.2 | 2024-r1.0.2.x |
| nagios / log_server | 2024-r1.1 | 2024-r1.1.x |
| nagios / log_server | 2024-r1.2 | 2024-r1.2.x |
| nagios / log_server | 2024-r1.3 | 2024-r1.3.x |
| nagios / log_server | 2024-r1.3.1 | 2024-r1.3.1.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime