Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-13999

Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active Directory (AD) or LDAP authentication token to an authenticated user. Exposure of the server’s AD/LDAP token could allow domain-wide authentication misuse, escalation of privileges, or further compromise of network-integrated systems.

Published

2025-10-30T22:15:45.180

Last Modified

2025-11-06T16:15:10.237

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-497
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nagios nagios_xi < 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
References