959 matches found
GLSA-202007-31 : Icinga: Root privilege escalation
The remote host is affected by the vulnerability described in GLSA-202007-31 Icinga: Root privilege escalation It was discovered that Icingas installed files have insecure permissions, possibly allowing root privilege escalation. Impact : A local attacker could escalate privileges to root...
Icinga 2 < 2.12.0-rc1 Privilege Escalation Vulnerability
Icinga 2 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:icinga:icinga2";...
OPENSUSE-SU-2020:0511-1 Security update for permissions
This update for permissions fixes the following issues: - Fixed spelling of icinga group bsc1168364 This update was imported from the SUSE:SLE-15-SP1:Update update project...
PT-2020-21605
Name of the Vulnerable Software and Affected Versions permissions affected versions not specified Description The issue concerns a spelling error in the icinga group. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this iss...
SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2020:0969-1)
This update for permissions fixes the following issues : Fixed spelling of icinga group bsc1168364 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...
SUSE-SU-2020:0969-1 Security update for permissions
This update for permissions fixes the following issues: - Fixed spelling of icinga group bsc1168364...
PT-2020-22718
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned as vulnerable. Description The issue concerns a fix for the spelling of the icinga group. No general information about the issue, estimated number of potentially affected devices, or real-world...
Icinga Web 2 Denial of Service Vulnerability
Icinga Web 2 is a PHP-based responsive and extensible web application framework from the Icinga project. A security vulnerability exists in Icinga Web 2 version 2.6.1. An attacker can exploit this vulnerability to cause a denial of service...
Icinga Web 2 Information Disclosure Vulnerability
Icinga Web 2 is a PHP-based responsive and extensible web application framework from the Icinga project. A security vulnerability exists in Icinga Web 2 version 2.6.1. An attacker can exploit the vulnerability to inject PHP ini-file directives and obtain information...
Icinga Web 2 < 2.6.2 Multiple Vulnerabilities
Icinga Web 2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:icinga:icingaweb2";...
Design/Logic Flaw
Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter...
CVE-2018-18247
Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter...
CVE-2018-18248
Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string...
CVE-2018-18249
Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a name=$PATH$APACHERUNDIR$APACHERUNUSER parameter to /icingaweb2/navigation/add or /icingaweb2/dashboard/new-dashlet...
UBUNTU-CVE-2018-18246
Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or via /icingaweb2/config/moduleenable?name=setup to enable the setup module...
UBUNTU-CVE-2018-18248
Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string...
CVE-2018-18247
Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter...
Design/Logic Flaw
Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string...
DEBIAN-CVE-2018-18249
Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a name=$PATH$APACHERUNDIR$APACHERUNUSER parameter to /icingaweb2/navigation/add or /icingaweb2/dashboard/new-dashlet...