Summary
Ein Angreifer kann mehrere Schwachstellen in Icinga ausnutzen, um Informationen offenzulegen oder einen Denial of Service hervorzurufen.
Product
Icinga ist ein Monitoring System.
Vulnerabilities 4
-
High 7.1
Icinga 2 API users could access restricted values in filter expressions
Icinga 2 is an open source monitoring system. In Icinga 2 versions 2.4 through 2.15.0, filter expressions provided to the various /v1/objects endpoints could access variables or objects that would otherwise be inaccessible for the user. This allows authentica…
-
High 7.1
Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference
Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a reference to null, dereferencing results in a segmentation fault. This can be used by any API user with access to an…
-
Medium 5.3
Icinga DB Web hidden/protected custom variables are prone to filter enumeration
Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/den…
-
Medium 4.0
Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user
Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script (also used during systemctl reload icinga2) and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process fro…
Revision history
-
#1
Initiale Fassung
References
-
Icinga Release Notes vom 2025-10-16
https://icinga.com/blog/releasing-icinga-2-v2-15-1-2-14-7-and-2-13-13-and-icinga-db-web-v1-2-3-and-1-1-4/
-
Icinga GitHub vom 2025-10-16
https://github.com/Icinga/icingadb-web/security/advisories/GHSA-w57j-28jc-8429
-
Icinga GitHub vom 2025-10-16
https://github.com/Icinga/icinga2/security/advisories/GHSA-gg32-w9rm-vp2v
-
Icinga GitHub vom 2025-10-16
https://github.com/Icinga/icinga2/security/advisories/GHSA-v9jg-xqhj-f43g
-
Icinga GitHub vom 2025-10-16
https://github.com/Icinga/icinga2/security/advisories/GHSA-pg6g-g99v-mw46