{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F7FC8C1-DF62-4338-98F3-F3BD64947FC6",
              "versionEndExcluding": "2014",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r1.0:*:*:*:*:*:*",
              "matchCriteriaId": "A7148521-9141-4664-AABA-3685B9F8182B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r1.1:*:*:*:*:*:*",
              "matchCriteriaId": "85AD8E07-E0A2-4A4C-9AC1-729098F943A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r1.2:*:*:*:*:*:*",
              "matchCriteriaId": "50052C89-1C67-4145-83B1-229CCA725A66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r1.3:*:*:*:*:*:*",
              "matchCriteriaId": "4556C92A-73BA-43D4-B5EA-7F1A1C6BC7D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r1.4:*:*:*:*:*:*",
              "matchCriteriaId": "65DD515E-2702-4C57-8457-BEF4AF3E1249",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r2.0:*:*:*:*:*:*",
              "matchCriteriaId": "3D2ECEA2-8554-49CB-B719-BB05CFE7BC15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r2.1:*:*:*:*:*:*",
              "matchCriteriaId": "9070F730-06C3-4591-AF65-21A9FAB01B25",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r2.2:*:*:*:*:*:*",
              "matchCriteriaId": "59287B8F-BBFB-4972-83FF-F5F0F3E7AFCE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r2.3:*:*:*:*:*:*",
              "matchCriteriaId": "693951F9-56C2-4F0B-A079-30248A9651A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r2.4:*:*:*:*:*:*",
              "matchCriteriaId": "4C04E36A-6018-4CBC-A2E3-DAA9C2B11088",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r2.5:*:*:*:*:*:*",
              "matchCriteriaId": "974F7C2A-FD09-4E47-BAD0-35A50CE54CD4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r2.6:*:*:*:*:*:*",
              "matchCriteriaId": "C6EC1CE0-E73D-401E-9EB1-E970E154DD03",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nagios:nagios_xi:2014:r2.7:*:*:*:*:*:*",
              "matchCriteriaId": "D7A68C94-BE69-4FDD-9EEB-C46CDCF02D49",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate."
    },
    {
      "lang": "es",
      "value": "Se descubri\u00f3 que Nagios XI anterior a 5.11.3 2024R1 manejaba incorrectamente la generaci\u00f3n de claves API (generadas aleatoriamente), lo que permit\u00eda a los atacantes generar posiblemente el mismo conjunto de claves API para todos los usuarios y utilizarlas para autenticarse."
    }
  ],
  "id": "CVE-2023-48082",
  "lastModified": "2025-07-10T17:06:27.267",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 9.1,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.2,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-10-14T19:15:10.780",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Release Notes"
      ],
      "url": "https://www.nagios.com/change-log/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}