Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:31723
HistoryAug 17, 2021 - 10:41 p.m.

Information Disclosure

2021-08-1722:41:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
icinga
vulnerability
credentials
api
permissions

EPSS

0.006

Percentile

79.5%

Icinga is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization which expose certain credentials through the API to authenticated API users with read permissions for the corresponding object types.