CVE-2024-14004

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.2

Description Nagios XI versions prior to 2024R1.2 have a privilege escalation issue related to how NagVis configuration data (specifically, nagvis.conf) is handled. An authenticated user may be able to gain higher-level access on the Nagios XI system by manipulating NagVis configuration data or exploiting inadequately validated configuration settings.

Recommendations Update to version 2024R1.2 or later.