CoreCVE
Back

MEDIUM

A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources

Published Apr 1, 2025

Description

A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enabling unauthorized modifications that compromise system integrity and availability.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-285

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 1, 2025
Updated Apr 1, 2025
Reserved Mar 11, 2025
Link CVE-2025-28131
CISA Vulnrichment
Updated Apr 1, 2025
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2025-28131
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-28131