CVE-2024-54961: Infoleak
Published Feb 20, 2025
·Updated
Nagios XI 2024R1.2.2 has an Information Disclosure vulnerability, which allows unauthenticated users to access multiple pages displaying the usernames and email addresses of all current users.
Affected Software
2 affected components
Nagios XI
Nagios Nagios XI=2024-r1.2.2
Event History
Feb 20, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-54961?
CVE-2024-54961 is considered a critical severity vulnerability due to the exposure of sensitive user information.
2
How do I fix CVE-2024-54961?
To fix CVE-2024-54961, you should upgrade Nagios XI to version 2024R1.2.3 or later.
3
Who is affected by CVE-2024-54961?
CVE-2024-54961 affects users of Nagios XI version 2024R1.2.2.
4
What type of vulnerability is CVE-2024-54961?
CVE-2024-54961 is an Information Disclosure vulnerability.
5
What data is exposed by CVE-2024-54961?
CVE-2024-54961 allows unauthenticated users to access usernames and email addresses of all current users.