CVE-2022-29272

Deeper analysis

Nagios XI versions through 5.8.5 contain an open redirect vulnerability in the login function, classified under CWE-601. The flaw permits an attacker-controlled URL to be supplied during authentication, resulting in redirection to an arbitrary destination and enabling spoofing. It carries a CVSS 3.1 score of 6.1 reflecting network attack vector, low complexity, no required privileges, and required user interaction with changed scope.

An unauthenticated remote attacker can exploit the issue by crafting a malicious link that victims are induced to click, allowing the attacker to redirect authenticated sessions to an external site under their control and thereby impersonate legitimate Nagios resources for phishing or credential-harvesting purposes.

Vendor change logs referenced in the advisories indicate that the issue is addressed in subsequent Nagios XI releases. The associated EPSS score reached a peak of 0.0638 on 2025-01-22 before receding to its current value of 0.0410, indicating a period of elevated exploitation interest after disclosure.