CVE-2024-13999CWE-497

CVE-2024-13999

Critical · published October 31, 2025

CVSS v3.1
9.8
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

⚡ A sneaky flaw lurks in Nagios XI versions prior to 2024R1.1.3, where an authenticated user could inadvertently snag sensitive AD or LDAP authentication tokens! 🔥 Think of it like a hotel guest accidentally receiving another guest's keycard to all rooms — now they can access areas they shouldn't! This means a malicious user could escalate their privileges and waltz through the network as if they owned the place, potentially leading to a catastrophic breach! Imagine someone uninvited getting access to the entire network — absolutely devastating!

Put simply

Think of it like a hotel guest accidentally receiving another guest's keycard to all rooms — now they can access areas they shouldn't! Under certain circumstances, Nagios XI exposes the server's AD/LDAP authentication token to authenticated users, allowing unauthorized domain-wide access and privilege escalation.

What to do

This means a malicious user could escalate their privileges and waltz through the network as if they owned the place, potentially leading to a catastrophic breach! Imagine someone uninvited getting access to the entire network — absolutely devastating! Immediately upgrade Nagios XI to version 2024R1.1.3 or later to close this gap. Review permissions for existing users and consider adding additional authentication layers for sensitive information. Regular audits of user access can also help safeguard your network. You've got this! Implement these steps, and you'll be on your way to securing your network in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01883 · 79.3th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-10-31T02:15Z
Affected products (7)
ProductVersionsFixed in
nagios/nagios_xi< 20242024
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
References (3)
EPSS history
Timeline
  • 30 OCT 21:28Z
    Nagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure
    cvelistv5