The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nagstamon | Jul 30, 2024 | Aug 16, 2013 |
| Gentoo Linux | — | Upgrade net-analyzer/nagstamon. | Oct 30, 2017 | Aug 16, 2013 |
| Suse | — | Upgrade nagstamon | Dec 12, 2013 | Aug 16, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub