Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Nagios Log Server < 2024R2.0.2 AD/LDAP Import Password Not Obfuscated
Vulnerability Description
Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the AD/LDAP user import functionality as it fails to obfuscate the password field during import. As a result, the plaintext password supplied for imported accounts may be exposed in the user interface, logs, or other diagnostic output. This can leak sensitive credentials to administrators or anyone with access to import results.
CVSS Information
N/A
Vulnerability Type
敏感数据的明文存储
Vulnerability Title
Nagios Log Server 安全漏洞
Vulnerability Description
Nagios Log Server是美国Nagios公司的一套集中式日志管理、监控和分析软件。 Nagios Log Server 2024R2.0.2之前版本存在安全漏洞，该漏洞源于AD或LDAP用户导入功能未能混淆密码字段，可能导致明文密码泄露。
CVSS Information
N/A
Vulnerability Type
N/A