CVE-2023-7322

Katalog CVE

CVSS 8.1 · High EPSS 1,1%

Kerentanan Incorrect Authorization pada nagios log server. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

Nagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability. Users who lacked the required API permission were nevertheless able to invoke API endpoints, resulting in unintended access to data and actions exposed via the API. This incorrect authorization check could allow authenticated but non-privileged users to read or modify resources beyond their intended rights.

Rincian

Terbit di NVD

30 Oktober 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 63,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/nagios-log-server-incorrect-authorization-granting-full-api-access advisory pihak ketiga
• https://www.nagios.com/changelog/nagios-log-server-2024r1/ release notes