CVE-2025-23203

🗓️ 26 Mar 2025 13:44:58Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 84 Views🌐 WEB

Security flaw in Icinga Director allows info retrieval by restricted users, risking data breach.

Reporter	Title	Published	Views	Family All 17
ATTACKERKB	CVE-2025-23203	26 Mar 202514:15	–	attackerkb
AlpineLinux	CVE-2025-23203	26 Mar 202514:15	–	alpinelinux
Circl	CVE-2025-23203	26 Mar 202516:23	–	circl
CNNVD	Icinga Director 访问控制错误漏洞	26 Mar 202500:00	–	cnnvd
Cvelist	CVE-2025-23203 Icinga has rest API endpoints accessible to restricted users	26 Mar 202513:44	–	cvelist
Debian CVE	CVE-2025-23203	26 Mar 202513:44	–	debiancve
EUVD	EUVD-2025-8204	3 Oct 202520:07	–	euvd
NVD	CVE-2025-23203	26 Mar 202514:15	–	nvd
OSV	CVE-2025-23203 Icinga has rest API endpoints accessible to restricted users	26 Mar 202513:44	–	osv
OSV	DEBIAN-CVE-2025-23203	26 Mar 202514:15	–	osv

Vulners

Node

icinga icingaweb2-module-directorRange1.0.0–1.10.4

icinga icingaweb2-module-directorRange1.11.0–1.11.4

[
  {
    "vendor": "Icinga",
    "product": "icingaweb2-module-director",
    "versions": [
      {
        "version": ">= 1.0.0, < 1.10.4",
        "status": "affected"
      },
      {
        "version": ">= 1.11.0, < 1.11.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/Icinga/icingaweb2-module-director/releases/tag/v1.11.4
github	www.github.com/Icinga/icingaweb2-module-director/commit/8d9ecf3b0a852aa2a756c518ef4f29db9ca0f9ee
github	www.github.com/Icinga/icingaweb2-module-director/commit/3fcb20178ff1722329bf8689795e6cc8e53a9978
github	www.github.com/Icinga/icingaweb2-module-director/releases/tag/v1.10.4
github	www.github.com/Icinga/icingaweb2-module-director/security/advisories/GHSA-3233-ggc5-m3qg

Parameter	Position	Path	Description	CWE
host	query param	icingaweb2/director/services?host=filteredHostName	Query parameter host can reveal existence of hosts to restricted users (truthy response for filtered hosts), aiding information disclosure.	CWE-284, CWE-200

15 Apr 2026 00:35Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.5

EPSS0.00055

SSVC