QwikSec

Security Database

CVE

CWE

Training

CVE-2025-34272

Published: Oct 30, 2025

Modified: Nov 17, 2025

PUBLISHED

Description

In Nagios Log Server versions prior to 2024R2.0.3, when a user's configured default dashboard is deleted, the application does not reliably fall back to an empty, default dashboard. In some implementations this can result in an unexpected dashboard being presented as the user's default view. Depending on the product's dashboard sharing and access policies, this behavior may cause information exposure or unexpected privilege exposure.

Vendor	Product	Versions
Nagios	Log Server	affected `0 - < 2024R2.0.3`

Weaknesses (CWE)

References

https://www.nagios.com/products/security/#log-server-2024R2

vendor-advisory

patch

https://www.nagios.com/changelog/#log-server

release-notes

patch

https://www.vulncheck.com/advisories/nagios-log-server-non-empty-default-dashboard-fallback

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.