{"id":"CVE-2025-34272","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-34272","generatedAt":"2026-10-28T02:22:56.154Z","title":"Depending on the product's dashboard sharing and access policies, this behavior may cause information exposure or unexpected privilege exposure.","description":"In Nagios Log Server versions prior to 2024R2.0.3, when a user's configured default dashboard is deleted, the application does not reliably fall back to an empty, default dashboard. In some implementations this can result in an unexpected dashboard being presented as the user's default view. Depending on the product's dashboard sharing and access policies, this behavior may cause information exposure or unexpected privilege exposure.","published":"2025-10-30T22:15:48.000Z","lastModified":"2026-10-07T21:10:00.000Z","status":"Analyzed","sourceIdentifier":"disclosure@vulncheck.com","cvss":{"version":"4.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-200"],"affected":["nagios/log server"],"epss":{"score":0.00859,"percentile":0.58208,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.86%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.nagios.com/changelog/#log-server","tags":["Release Notes"],"source":"disclosure@vulncheck.com"},{"url":"https://www.nagios.com/products/security/#log-server-2024R2","tags":["Vendor Advisory"],"source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/nagios-log-server-non-empty-default-dashboard-fallback","tags":["Third Party Advisory"],"source":"disclosure@vulncheck.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-34272","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}