low3.5
CVE-2023-24035
An issue was discovered in Nagios XI before 5.9.3.
Impact
An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing comparison that leads to an attacker being able to bruteforce the admin password, by measuring timing differences in the comparison.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nagios | Nagios XI | before 5.9.3. |
Versions were read from the advisory text. No structured product data has been published for this record yet.