Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jrg4-7p24-jjmf

Опубликовано: 01 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.6

Описание

A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enabling unauthorized modifications that compromise system integrity and availability.

A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enabling unauthorized modifications that compromise system integrity and availability.

EPSS

Процентиль: 34%
0.00141
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 4.6
nvd
10 месяцев назад

A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enabling unauthorized modifications that compromise system integrity and availability.

EPSS

Процентиль: 34%
0.00141
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-285