Icinga Web 2 -- directory traversal vulnerability

Icinga development team reports: CVE-2020-24368 Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are readable by the process running Icinga Web 2. This issue is fixed in Icinga Web 2 in v2.6.4,...

CVE-2023-24368

...

CVE-2023-24368

CVE-2023-24368 is marked as rejected/not a security issue in the initial record. Connected PT-2023-19532 describes Temenos T24 Release 20 with an incorrect access control issue (POST to HELPTEXT.MAINMENU) and notes vendor dispute; no fix version is listed. Technical details beyond this are not pr...