Medium severity6.5NVD Advisory· Published Oct 30, 2025· Updated Jun 16, 2026
CVE-2013-10072
CVE-2013-10072
Description
Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality. Users with read-only roles could directly reach Auto-Discovery endpoints and pages that should require elevated permissions, exposing discovery results and allowing unintended access to discovery operations.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- Nagios/XIv5Range: 0
<2012R1.6+ 7 more
- (no CPE)range: <2012R1.6
- cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*range: <=2011
- cpe:2.3:a:nagios:nagios_xi:2012:r1.0:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2012:r1.1:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2012:r1.2:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2012:r1.3:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2012:r1.4:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2012:r1.5:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- www.vulncheck.com/advisories/nagios-xi-auto-discovery-missing-authorizationnvdThird Party Advisory
- www.nagios.com/changelog/nagios-xi/nvdRelease Notes
News mentions
0No linked articles in our index yet.