CVE-2024-13999: Nagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure
Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active Directory (AD) or LDAP authentication token to an authenticated user. Exposure of the server’s AD/LDAP token could allow domain-wide authentication misuse, escalation of privileges, or further compromise of network-integrated systems.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13999?
CVE-2024-13999 is considered a high severity vulnerability due to the potential for privilege escalation and misuse of Active Directory or LDAP authentication tokens.
How do I fix CVE-2024-13999?
To remediate CVE-2024-13999, upgrade to Nagios XI version 2024R1.1.3 or later.
Who is affected by CVE-2024-13999?
CVE-2024-13999 affects all Nagios XI versions prior to 2024R1.1.3.
What kind of information is disclosed in CVE-2024-13999?
CVE-2024-13999 discloses the server's Active Directory or LDAP authentication token to authenticated users under certain conditions.
What are the potential impacts of CVE-2024-13999?
The potential impacts of CVE-2024-13999 include unauthorized domain-wide access, escalation of privileges, and authentication misuse.