Nagios Network Analyzer < 2024R2.0.1 RCE in LDAP Certificate Removal Function
Vulnerability Description
Nagios Network Analyzer versions prior to 2024R2.0.1 contain a vulnerability in the LDAP certificate management functionality whereby the certificate removal operation fails to apply adequate input sanitation. An authenticated administrator can trigger command execution on the underlying host in the context of the web application service, resulting in remote code execution with the service's privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-34280
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Haoyu Li
- Shiwu Zhao
- rmb122
- rry
- Xingchen Chen
- Ru Tan
- Qixu Liu
References
More from Nagios
View All →Affected Vendor
Nagios
View all reports →