Nagios Support Forum

I've noticed that in Naigos XI 2012R2.9, that if I log in as nagiosadmin (or any other user) without a password, I am logged in as that user. If I enter an incorrect password, I am not logged in. This problem does not exist in the latest Nagios XI.

Is there a patch for 2012R2.9 or do I need to upgrade to the 2014 Nagios to correct this bug?

We are definitely not seeing this on out end. Does this work if you are on a new browser? How about a machine that has never logged into XI before? My guess is your browser is caching passwords, or possibly even a proxy in your network is doing it.