Threats tagged 'ghsa-248r-c6gj-jwpq'

Nagios XI versions prior to 2024R1.1.3 may disclose the server's Active Directory (AD) or LDAP authentication token to an authenticated user under certain conditions. This exposure could enable misuse of domain-wide authentication, privilege escalation, or further compromise of network-integrated systems. The vulnerability is rated critical with a CVSS score of 9.8.