CVE-2024-33775

2024-05-0100:00:00

mitre

github.com

nagios xi

autodiscover component

privilege escalation

remote attacker

crafted dashlet

AI Score

7.1

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted Dashlet.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*"
    ],
    "vendor": "nagios",
    "product": "nagios_xi",
    "versions": [
      {
        "status": "affected",
        "version": "2024R1.01"
      }
    ],
    "defaultStatus": "unknown"
  }
]