Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Nagios Log Server 2024R2.0.2 Clear all filters
TI-2025-24412 CVE-2025-34271 · GHSA-3wc8-676p-crj6

Nagios Log Server < 2024R2.0.2 Cluster Manager Credential Requests Sent Over Plaintext

Priority MEDIUM 45

Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager component when requesting sensitive credentials from peer nodes over an unencrypted channel even when SSL/TLS is enabled in th…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00744 Published 2025-10-30 Fixed in 2024R2.0.2 CWE-319
TI-2025-24411 CVE-2025-34270 · GHSA-6577-56w8-v2rg

Nagios Log Server < 2024R2.0.2 AD/LDAP Import Password Not Obfuscated

Priority LOW 37

Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the AD/LDAP user import functionality as it fails to obfuscate the password field during import.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00626 Published 2025-10-30 Fixed in 2024R2.0.2 CWE-312