Nagios XI Information Disclosure Vulnerability

A vulnerability in Nagios XI version 2024R1.2.2 allows unauthenticated users to access multiple pages that reveal the usernames and email addresses of all current users. This information disclosure can facilitate reconnaissance efforts, potentially leading to phishing attacks or further exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized access to user information, including usernames and email addresses, which could be used for phishing attacks or other malicious activities.

Remediation

Users are advised to update to the latest version of Nagios XI.