vendor:
Nagios XI
by:
Jarod Jaslow (MAWK)
6.1
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Nagios XI
Affected Version From: Nagios XI Version 2024R1.01
Affected Version To: Nagios XI Version 2024R1.01
Patch Exists: YES
Related CWE: CVE-2024-24401
CPE: a:nagios:nagios_xi:2024r1.01
Platforms Tested: Linux
2024
NAGIOS XI SQL Injection
The exploit allows an attacker to bypass authentication and gain access to the Nagios XI application by manipulating SQL queries. This vulnerability has been assigned the CVE-2024-24401. By exploiting this vulnerability, an attacker can obtain sensitive information, modify data, or perform unauthorized actions.
Mitigation:
To mitigate this vulnerability, users should apply the latest security patches provided by Nagios XI. Additionally, implementing proper input validation and sanitization techniques can help prevent SQL injection attacks.