SUSE CVE-2021-32743

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions prior to 2.11.10 and from version 2.12.0 through version 2.12.4, some of the Icinga 2 features that require credentials for extern...

SUSE CVE-2021-32747

Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which custom variables are exposed to unauthorized users exists between versions 2.0.0 and 2.8.2. Custom variables are user-defined keys and values on configuration objects in Icinga...

SUSE CVE-2021-37698

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions 2.5.0 through 2.13.0, ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer do not verify the server's certificate...

SUSE CVE-2022-24714

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Installations of Icinga 2 with the IDO writer enabled are affected. If you use service custom variables in role restrictions, and you regularly decommission service objects, users with said roles may...

SUSE CVE-2022-24715

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to the configuration, can create SSH resource files in unintended directories, leading to the execution of arbitrary code. This issue has been resolved in versions 2.8.6...

SUSE CVE-2022-24716

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including icingaweb2 configuration files with database credentials. This issue has been resolv...

SUSE-SU-2022:3576-1 Security update for icinga

This update for icinga fixes the following issues: - CVE-2016-9566: Fixed root privilege escalation bsc1014637. - CVE-2019-3698: Fixed symbolic link vulnerability that can cause DoS or potentially escalate privileges bsc1156309...

Icinga Web 2: Multiple Vulnerabilities

Background Icinga Web 2 is a frontend for icinga2. Description Multiple vulnerabilities have been discovered in Icinga Web 2. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at...

GLSA-202208-05 : Icinga Web 2: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-05 Icinga Web 2: Multiple Vulnerabilities - Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are readable by the process...

The vulnerability of the Icinga network availability monitoring system, related to insecure management of privileges, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Icinga network availability monitoring system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

Inciga Web v2.8.2 - Cross Site Scripting Vulnerability

Document Title: =============== Inciga Web v2.8.2 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2273 Release Date: ============= 2022-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 22...

The vulnerability of the `doc` module in the Icinga Web 2 PHP framework allows a hacker to gain access to confidential data.

The vulnerability of the doc module in the Icinga Web 2 PHP framework is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability allows an attacker to gain access to confidential data...

The vulnerability of the Icinga Web 2 PHP framework, related to information disclosure, allows attackers to gain access to confidential data.

The vulnerability of the Icinga Web 2 PHP framework relates to the disclosure of information. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

openSUSE 15 Security Update : icingaweb2 (openSUSE-SU-2022:0097-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0097-1 advisory. - Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Installations of Icinga 2 with the IDO...

Icinga Web 2 Detection Consolidation

Consolidation of Icinga Web 2 detections. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...

Icinga Web 2 Detection (Linux/Unix SSH Login)

SSH login-based detection of Icinga Web 2. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.170046...

Insecure Access Control

Icinga Web 2 has insecure access control. Users may still have access to decommissioned service objects...

Remote Code Execution (RCE)

Icinga Web 2 is vulnerable to remote code execution. The vulnerability exists due to the lack of validation of access to the configuration which can create SSH resource files in unintended directories...

Information Disclosure

Icinga Web 2 is vulnerable to information disclosure. The vulnerability exists due to a lack of validation of access to the web-server allowing an attacker to leak the contents of the files of the local system...

Icinga Web 2 < 2.8.6, 2.9.x < 2.9.6 Multiple Vulnerabilities

Icinga Web 2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:icinga:icingaweb2";...