Nagios Log Server Incorrect Authorization Vulnerability Allowing Unprivileged API Access

A vulnerability exists in Nagios Log Server versions prior to 2024R1, where incorrect authorization allows users without the necessary API permissions to access API endpoints. This flaw enables authenticated but non-privileged users to read or modify resources beyond their authorized rights, leading to unintended access to data and actions available through the API.

Impact

Exploitation of this vulnerability could result in unauthorized access to data and actions via the API, allowing users to read or modify resources beyond their intended rights.

Remediation

Users can upgrade to Nagios Log Server version 2024R1 or later to address this vulnerability.