Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•7 views

CVE-2026-60053: Insufficient Session Expiration

Insufficient Session Expiration vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Administrative API keys remained usable after the owning administrator was demoted or the account was marked inactive, suspended, or deleted, allowing continued access until the keys...

9.1CVSS5.8AI score0.00566EPSS
SaveExploits0References4
OSV
OSV
•added 2025/10/07 8:15 p.m.•17 views

CVE-2025-44823

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/getusers call. This is GL:NLS475...

8.8CVSS5.8AI score0.16118EPSS
SaveExploits2References2
NVD
NVD
•added 2025/10/07 8:15 p.m.•22 views

CVE-2025-44823

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/getusers call. This is GL:NLS475...

9.9CVSS0.16118EPSS
SaveExploits2References2
Rows per page
Query Builder