CVE-2025-44824: High severity Nagios Log Server vulnerability
Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch service via a /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch call. The service stops even though "message": "Could not stop elasticsearch" is in the API response. This is GL:NLS#474.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-44824?
CVE-2025-44824 is considered a critical vulnerability due to the potential for unauthorized service disruption.
How do I fix CVE-2025-44824?
To fix CVE-2025-44824, upgrade to Nagios Log Server version 2024R1.3.2 or later.
Who is affected by CVE-2025-44824?
CVE-2025-44824 affects authenticated users with read-only API access in Nagios Log Server prior to version 2024R1.3.2.
What systems are impacted by CVE-2025-44824?
CVE-2025-44824 impacts Nagios Log Server versions before 2024R1.3.2.
What symptoms indicate a possible exploitation of CVE-2025-44824?
Symptoms of exploitation may include unexpected stops of the Elasticsearch service without proper authorization confirmation.