Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2025-34272
Analyzed
More InfoOfficial Page
Source-disclosure@vulncheck.com
View Known Exploited Vulnerability (KEV) details
Published At-30 Oct, 2025 | 22:15
Updated At-06 Nov, 2025 | 16:29

In Nagios Log Server versions prior to 2024R2.0.3, when a user's configured default dashboard is deleted, the application does not reliably fall back to an empty, default dashboard. In some implementations this can result in an unexpected dashboard being presented as the user's default view. Depending on the product's dashboard sharing and access policies, this behavior may cause information exposure or unexpected privilege exposure.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary4.05.3MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary3.16.5MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Type: Secondary
Version: 4.0
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Type: Primary
Version: 3.1
Base score: 6.5
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CPE Matches

Nagios Enterprises, LLC
nagios
>>log_server>>Versions before 2024(exclusive)
cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r1.3.2:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r1.3.3:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r1.3.4:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r1.3.5:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r2:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r2.0.1:*:*:*:*:*:*
Nagios Enterprises, LLC
nagios
>>log_server>>2024
cpe:2.3:a:nagios:log_server:2024:r2.0.2:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-200Secondarydisclosure@vulncheck.com
CWE ID: CWE-200
Type: Secondary
Source: disclosure@vulncheck.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://www.nagios.com/changelog/#log-serverdisclosure@vulncheck.com
Release Notes
https://www.nagios.com/products/security/#log-server-2024R2disclosure@vulncheck.com
Vendor Advisory
https://www.vulncheck.com/advisories/nagios-log-server-non-empty-default-dashboard-fallbackdisclosure@vulncheck.com
Third Party Advisory
Hyperlink: https://www.nagios.com/changelog/#log-server
Source: disclosure@vulncheck.com
Resource:
Release Notes
Hyperlink: https://www.nagios.com/products/security/#log-server-2024R2
Source: disclosure@vulncheck.com
Resource:
Vendor Advisory
Hyperlink: https://www.vulncheck.com/advisories/nagios-log-server-non-empty-default-dashboard-fallback
Source: disclosure@vulncheck.com
Resource:
Third Party Advisory
Change History
0Changes found

Details not found