Security Advisory
CVE-2018-17148
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An Insufficient Access Control vulnerability (leading to credential disclosure) in coreconfigsnapshot.php (aka configuration snapshot page) in Nagios XI before 5.5.4 allows remote attackers to gain access to configuration files containing confidential credentials.