Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2023-48082

EPSS 1.15% · P79
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-48082

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Nagios XI 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Nagios XI是美国Nagios公司的一套IT基础设施监控解决方案。该方案支持对应用、服务、操作系统等进行监控和预警。 Nagios XI 5.11.3 2024R1之前版本存在安全漏洞,该漏洞源于无法正确处理API密钥生成,使得攻击者可能为所有用户生成相同的一组API密钥并利用它们进行身份验证。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2023-48082

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-48082

登录查看更多情报信息。

Same Patch Batch · n/a · 2024-10-14 · 33 CVEs total

CVE-2024-355198.4 HIGHNETGEAR EX6120,EX6100和EX3700 安全漏洞
CVE-2024-355208.4 HIGHNETGEAR R7000 安全漏洞
CVE-2024-355188.4 HIGHNETGEAR EX6120 安全漏洞
CVE-2024-492145.3 MEDIUMHAProxy 安全漏洞
CVE-2024-48168D-Link DCS-960L 安全漏洞
CVE-2024-46535JEPaaS 安全漏洞
CVE-2024-48793INATRONIC com.inatronic.bmw 安全漏洞
CVE-2024-48799LOREX com.lorexcorp.lorexping 安全漏洞
CVE-2024-48791Plug n Play Camera com.starvedia.mCamView.zwave 安全漏洞
CVE-2024-48253Cloudlog 安全漏洞
CVE-2024-48796EQUES com.eques.plug 安全漏洞
CVE-2024-48249Wavelog 安全漏洞
CVE-2024-48153DrayTek Vigor 3900 安全漏洞
CVE-2024-48790ILIFE com.ilife.home.global 安全漏洞
CVE-2024-48259Cloudlog 安全漏洞
CVE-2024-48150D-Link DIR-820L 安全漏洞
CVE-2024-48119Vtiger CRM 安全漏洞
CVE-2024-46528KubeSphere 安全漏洞
CVE-2024-48795Creative com.creative.apps.xficonnect 安全漏洞
CVE-2024-48821Automatic Systems SlimLane 安全漏洞

Showing top 20 of 33 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2023-48082

No comments yet


Leave a comment