Article Details
Scrape Timestamp (UTC): 2023-09-20 16:27:45.621
Source: https://thehackernews.com/2023/09/critical-security-flaws-exposed-in.html
Original Article Text
Click to Toggle View
Critical Security Flaws Exposed in Nagios XI Network Monitoring Software . Multiple security flaws have been disclosed in the Nagios XI network monitoring software that could result in privilege escalation and information disclosure. The four security vulnerabilities, tracked from CVE-2023-40931 through CVE-2023-40934, impact Nagios XI versions 5.11.1 and lower. Following responsible disclosure on August 4, 2023, They have been patched as of September 11, 2023, with the release of version 5.11.2. "Three of these vulnerabilities (CVE-2023-40931, CVE-2023-40933 and CVE-2023-40934) allow users, with various levels of privileges, to access database fields via SQL Injections," Outpost24 researcher Astrid Tedenbrant said. "The data obtained from these vulnerabilities may be used to further escalate privileges in the product and obtain sensitive user data such as password hashes and API tokens." CVE-2023-40932, on the other hand, relates to a cross-site scripting (XSS) flaw in the Custom Logo component that could be used to read sensitive data, including cleartext passwords from the login page. The list of flaws is described below - Successful exploitation of the three SQL injection vulnerabilities could permit an authenticated attacker to execute arbitrary SQL commands, while the XSS bug could be exploited to inject arbitrary JavaScript and read and modify page data. This is not the first time security issues have been uncovered in Nagios XI. In 2021, Skylight Cyber and Claroty discovered as many as two dozen flaws that could be abused to hijack the infrastructure and achieve remote code execution.
Daily Brief Summary
Four security vulnerabilities were found in versions of Nagios XI network monitor software 5.11.1 and below, with patches released in September 2023.
Three of the vulnerabilities pertain to SQL Injections that enable users of varying privileges to access database fields. The data collected from these vulnerabilities could be employed to escalate privileges within the product, thereby accessing sensitive data like password hashes and API tokens.
The fourth vulnerability is a cross-site scripting (XSS) flaw present in the Custom Logo component, potentially allowing hackers to read sensitive data, including login page passwords.
Successful exploitation of these vulnerabilities could allow an authenticated attacker to execute random SQL commands and insert arbitrary JavaScript while reading and modifying page data.
This isn't the first time Nagios XI has had security issues. In 2021, Skylight Cyber and Claroty discovered about two dozen flaws that could potentially facilitate remote code execution and infrastructure hijacking.