CVE-2024-14004: Nagios XI < 2024R1.2 Privilege Escalation via NagVis Configuration (nagvis.conf)
Nagios XI versions prior to 2024R1.2 contain a privilege escalation vulnerability related to NagVis configuration handling (nagvis.conf). An authenticated user could manipulate NagVis configuration data or leverage insufficiently validated configuration settings to obtain elevated privileges on the Nagios XI system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Nagios XIto a version that resolves this vulnerability.Fixed in 2024R1.2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-14004?
CVE-2024-14004 is classified as a privilege escalation vulnerability.
How do I fix CVE-2024-14004?
To fix CVE-2024-14004, upgrade Nagios XI to version 2024R1.2 or later.
Who is affected by CVE-2024-14004?
Nagios XI versions prior to 2024R1.2 are affected by CVE-2024-14004.
What kind of vulnerability is CVE-2024-14004?
CVE-2024-14004 is a privilege escalation vulnerability related to NagVis configuration handling.
Can authenticated users exploit CVE-2024-14004?
Yes, authenticated users can exploit CVE-2024-14004 by manipulating NagVis configuration data.