Threats tagged 'ghsa-2mr3-pj2m-q569'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.0	EPSS 1.0%	CVE-2024-13998Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose sensitive user account information Medium6.0EPSS 1.0%2025-11-04GCVE DatabaseCVE-2024-13998 Nagios XI versions prior to 2024R1.1.3 have a vulnerability that allows certain authenticated users to access sensitive user account information, including API keys and hashed passwords, which they should not be able to see. This exposure could enable account compromise or abuse of API privileges. The issue relates to incomplete fixes in earlier versions addressed by CVE-2024-13995. EPSS 1.0%Report on CVE-2024-13998 Vulnerability CWE-497 #ghsa-2mr3-pj2m-q569	GCVE Database	2025-11-04

Page 1 of 1