CVE-2025-44824
Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch service via a /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch call. The service stops even though "message": "Could not stop elasticsearch" is in the API response. This is GL:NLS#474.
| Software | From | Fixed in |
|---|---|---|
| nagios / log_server | - | 2024 |
| nagios / log_server | 2024-r1 | 2024-r1.x |
| nagios / log_server | 2024-r1.0.1 | 2024-r1.0.1.x |
| nagios / log_server | 2024-r1.0.2 | 2024-r1.0.2.x |
| nagios / log_server | 2024-r1.1 | 2024-r1.1.x |
| nagios / log_server | 2024-r1.2 | 2024-r1.2.x |
| nagios / log_server | 2024-r1.3 | 2024-r1.3.x |
| nagios / log_server | 2024-r1.3.1 | 2024-r1.3.1.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime