Unrated severityNVD Advisory· Published Oct 30, 2025· Updated Nov 17, 2025
Nagios XI < 2012R1.6 Auto-Discovery Missing Authorization
CVE-2013-10072
Description
Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality. Users with read-only roles could directly reach Auto-Discovery endpoints and pages that should require elevated permissions, exposing discovery results and allowing unintended access to discovery operations.
Affected products
2- Nagios/XIv5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.nagios.com/changelog/nagios-xi/mitrerelease-notespatch
- www.vulncheck.com/advisories/nagios-xi-auto-discovery-missing-authorizationmitrethird-party-advisory
News mentions
0No linked articles in our index yet.