Search
Find a vulnerability
Search criteria
Related vulnerabilities
CERTFR-2023-AVI-0085
Vulnerability from certfr_avis - Published: 2023-02-02 - Updated: 2023-02-02
De multiples vulnérabilités ont été découvertes dans Nagios XI. Elles permettent à un attaquant de provoquer un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Nagios XI versions ant\u00e9rieures \u00e0 5.9.3",
"product": {
"name": "Nagios XI",
"vendor": {
"name": "Nagios",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-24036",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24036"
},
{
"name": "CVE-2023-24035",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24035"
},
{
"name": "CVE-2023-24037",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24037"
}
],
"initial_release_date": "2023-02-02T00:00:00",
"last_revision_date": "2023-02-02T00:00:00",
"links": [],
"reference": "CERTFR-2023-AVI-0085",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-02-02T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Nagios XI. Elles\npermettent \u00e0 un attaquant de provoquer un contournement de la politique\nde s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Nagios XI",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Nagios XI du 01 f\u00e9vrier 2023",
"url": "https://www.nagios.com/downloads/nagios-xi/change-log/"
}
]
}
GSD-2023-24036
Vulnerability from gsd - Updated: 2023-12-13 01:20Details
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2023-24036",
"id": "GSD-2023-24036"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2023-24036"
],
"id": "GSD-2023-24036",
"modified": "2023-12-13T01:20:58.100631Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2023-24036",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}
}
}
WID-SEC-W-2023-0316
Vulnerability from csaf_certbund - Published: 2023-02-08 23:00 - Updated: 2023-02-28 23:00Summary
Nagios Enterprises Nagios XI: Mehrere Schwachstellen
Severity
Mittel
Scope
3 vulnerabilities in this advisory, including CVE-2023-24036.
CVE-2023-24036
Es existiert eine Schwachstelle in Nagios Enterprises Nagios XI. Die Anwendung verwendet schwache Authentifizierungs-Tokens und -Salts. Ein entfernter anonymer Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsvorkehrungen zu umgehen.