6.5

CVE-2025-34272

Nagios Log Server < 2024R2.0.3 Non-Empty Default Dashboard Fallback

In Nagios Log Server versions prior to 2024R2.0.3, when a user's configured default dashboard is deleted, the application does not reliably fall back to an empty, default dashboard. In some implementations this can result in an unexpected dashboard being presented as the user's default view. Depending on the product's dashboard sharing and access policies, this behavior may cause information exposure or unexpected privilege exposure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nagios ≫ Log Server Version < 2024
Nagios ≫ Log Server Version 2024 Update r1
Nagios ≫ Log Server Version 2024 Update r1.0.1
Nagios ≫ Log Server Version 2024 Update r1.0.2
Nagios ≫ Log Server Version 2024 Update r1.1
Nagios ≫ Log Server Version 2024 Update r1.2
Nagios ≫ Log Server Version 2024 Update r1.3
Nagios ≫ Log Server Version 2024 Update r1.3.1
Nagios ≫ Log Server Version 2024 Update r1.3.2
Nagios ≫ Log Server Version 2024 Update r1.3.3
Nagios ≫ Log Server Version 2024 Update r1.3.4
Nagios ≫ Log Server Version 2024 Update r1.3.5
Nagios ≫ Log Server Version 2024 Update r2
Nagios ≫ Log Server Version 2024 Update r2.0.1
Nagios ≫ Log Server Version 2024 Update r2.0.2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.8% 0.529
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
disclosure@vulncheck.com 5.3 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://www.nagios.com/changelog/#log-server
Release Notes
https://www.vulncheck.com/advisories/nagios-log-server-non-empty-default-dashboard-fallback
Third Party Advisory
https://www.nagios.com/products/security/#log-server-2024R2
Vendor Advisory