Threats tagged 'ghsa-3wc8-676p-crj6'

Nagios Log Server versions prior to 2024R2.0.2 have a vulnerability in the cluster manager component that allows sensitive credentials to be intercepted over an unencrypted channel, even when SSL/TLS is enabled. This enables an attacker on the network path to capture credentials and potentially authenticate as a cluster node or service account, leading to unauthorized access and system compromise.