CVE-2025-34273: Nagios Log Server < 2024R2.0.3 Non-Admin Dashboard Deletion
Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards. The application did not correctly enforce authorization checks for the global dashboard deletion workflow, enabling lower-privileged users to remove dashboards that affect other users or the overall monitoring UI.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Nagios Log Serverto a version that resolves this vulnerability.Fixed in 2024R2.0.3
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34273?
CVE-2025-34273 is categorized as a moderate severity vulnerability due to its potential impact on data integrity.
How do I fix CVE-2025-34273?
To mitigate CVE-2025-34273, upgrade Nagios Log Server to version 2024R2.0.3 or later.
Who is affected by CVE-2025-34273?
CVE-2025-34273 affects all versions of Nagios Log Server prior to 2024R2.0.3.
What type of vulnerability is CVE-2025-34273?
CVE-2025-34273 is an incorrect authorization vulnerability that allows non-admin users to delete global dashboards.
Are there any workarounds for CVE-2025-34273?
There are no known workarounds for CVE-2025-34273; the best course of action is to update the software.