Lucene search
GoogleOSV:CVE-2018-18249HistoryDec 17, 2018 - 3:29 p.m.
CVE-2018-18249
2018-12-1715:29:00
Google
osv.dev
4
Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a name=${PATH}${APACHE_RUN_DIR}${APACHE_RUN_USER} parameter to /icingaweb2/navigation/add or /icingaweb2/dashboard/new-dashlet.
Related
cve
cve
CVE-2018-18249
2018-12-17 15:29:00
debiancve
debiancve
CVE-2018-18249
2018-12-17 15:29:00
prion
prion
Code injection
2018-12-17 15:29:00
cvelist
cvelist
CVE-2018-18249
2018-12-17 15:00:00
ubuntucve
ubuntucve
CVE-2018-18249
2018-12-17 00:00:00
nvd
nvd
CVE-2018-18249
2018-12-17 15:29:00
suse
suse
Security update for icingaweb2 (moderate)
2020-01-16 00:00:00
openvas
openvas
Icinga Web 2 < 2.6.2 Multiple Vulnerabilities
2018-12-19 00:00:00
openSUSE: Security Advisory for icingaweb2 (openSUSE-SU-2020:0067_1)
2020-01-27 00:00:00
nessus
nessus
openSUSE Security Update : icingaweb2 (openSUSE-2020-67)
2020-01-17 00:00:00