Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:31722
HistoryAug 17, 2021 - 10:40 p.m.

Privilege Escalation

2021-08-1722:40:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
icinga
privilege escalation
vulnerability
unsanitized attribute viewing

EPSS

0.006

Percentile

78.4%

Icinga is vulnerable to privilege escalation. The vulnerability exists due to the ability to view most attributes of all config objects including ticket_salt of ApiListener due to the lack of sanitization.