CVE-2025-39665:
User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.
1 issue left for the package maintainer to handle:
CVE-2025-39665:
(needs triaging)
User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.
Migration status for nagvis (1:1.10.6-1 to 1:1.10.7-1): Waiting for test results or another package, or too young (no action required now - check later)
![[bug history graph]](https://qa.debian.org/data/bts/graphs/n/nagvis.png){kind=link}