CVE-2023-48082 Information

Description

Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated) allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate.

Reference

https://www.nagios.com/change-log/