CVE-2025-44823 — Nagios / Log Server

CVE-2025-44823

Nagios / Log Server PUBLISHED

Description (CNA)

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL:NLS#475.

Affected (CNA)

Vendor / product	Versions
Nagios / Log Server	affected 0 before 2024R1.3.2

CWE

CWE-497

References

https://www.nagios.com/changelog/#log-server
https://www.exploit-db.com/exploits/52177

ADP enrichment

CISA-ADP

No English description supplied.

https://www.exploit-db.com/exploits/52177