Privilege Escalation

Icinga is vulnerable to privilege escalation. The vulnerability exists due to the ability to view most attributes of all config objects including ticketsalt of ApiListener due to the lack of sanitization...

Important: 389-ds-base

Issue Overview: A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes. CVE-2019-14824 Affected Packages:...