CVE-2022-29270

In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address...

CVE-2022-29270

In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address...

CVE-2022-29270

CVE-2022-29270 affects Nagios XI (<= 5.8.5). The vulnerability allows a user without password verification to change their own e‑mail address, indicating an authentication bypass at the account-management layer. The NVD data lists CVSS v3.1 base score 4.3 (LOW) with NETWORK attack vector and n...