CVEvulnerability

CVE-2025-28131

4.6 MEDIUM Published 2025-04-01 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-04-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.6 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Weaknesses
CWE-285

Description

A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enabling unauthorized modifications that compromise system integrity and availability.

Affected configurations

• nagios network analyzer 2024

Related

Weakness · CWE (1)

  • CWE-285 Improper Authorization weakness

References