Sign In

CVE-2025-34280

📊 8.6 HIGH🎯 0 exploits
📅 Published Oct 30, 2025
📋 Status: Received

Nagios Network Analyzer versions prior to 2024R2.0.1 contain a vulnerability in the LDAP certificate management functionality whereby the certificate removal operation fails to apply adequate input sanitation. An authenticated administrator can trigger command execution on the underlying host in the context of the web application service, resulting in remote code execution with the service's privileges.

Metrics
8.6 HIGHCVSS v4.0[email protected]
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

🔍 Technical Details

Analysis Status
Received
CVSS Details
8.6 (HIGH)v4.0
Source: [email protected]
Published Date
Oct 30, 2025 (1 day ago)
Last Modified
Oct 30, 2025 (1 day ago)
Security Weaknesses1
References4