UBUNTU-CVE-2018-6535

An issue was discovered in Icinga 2.x through 2.8.1. The lack of a constant-time password comparison function can disclose the password to an attacker...

CVE-2018-6535

CVE-2018-6535 affects Icinga 2.x up to version 2.8.1. The vulnerability arises from a lack of a constant-time password comparison function, which can disclose the password to an attacker. The connected sources confirm the issue but do not provide specifics on exploit scenarios, affected module/fi...