| Package | Affected versions | Patched versions |
|---|---|---|
| nagios xi | = 2014< 2014 | 2014 |
Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free