icinga2 -- Improper access control for JSON-RPC update certificate messages

The Icinga team reports: The code handling certificate update JSON-RPC messages was flawed and did not properly validate the sender of the message, allowing an unauthenticated attacker that can connect to Icinga 2 to update both the own certificate as well as the trusted CA certificate. Updating...