CVE-2023-24035
LOW
NVD
CVSS Score
3.5
Severity
LOW
Published
Sep 14, 2026
Vendor
unknown
Description
An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing comparison that leads to an attacker being able to bruteforce the admin password, by measuring timing differences in the comparison.