CVE-2023-7322

Name of the Vulnerable Software and Affected Versions Nagios Log Server versions prior to 2024R1

Description Nagios Log Server versions prior to 2024R1 have an incorrect authorization issue. Users without the necessary API permissions could access API endpoints, leading to unauthorized data access and actions. This incorrect authorization check allowed authenticated users with insufficient privileges to read or modify resources they should not have access to. The issue involves the ability to invoke API endpoints without proper authorization.

Recommendations Update to version 2024R1 or later.