CVE-2013-10072

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2012R1.6

Description Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality. Users with read-only roles could access Auto-Discovery endpoints and pages that require elevated permissions. This exposure allows unintended access to discovery results and discovery operations. The vulnerable functionality involves reaching Auto-Discovery endpoints directly, bypassing necessary permission checks.

Recommendations Update to version 2012R1.6 or later.