Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Icinga ausnutzen, um Informationen offenzulegen.
Product
Icinga ist ein Monitoring System.
Vulnerabilities 2
-
Medium 6.8
Icinga has insecure permission of %ProgramData%\icinga2\var on Windows
Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropriate permissions for the `%ProgramData%\icinga2\var` folder on Windows. This resulted in the its con…
-
Medium 6.8
Icinga for Windows certificate can have too-open permissions
The Icinga PowerShell Framework provides configuration and check possibilities to ensure integration and monitoring of Windows environments. In versions prior to 1.13.4, 1.12.4, and 1.11.2, permissions of the Icinga for Windows `certificate` directory grant e…
Revision history
-
#2
Neue Updates von openSUSE aufgenommen
-
#1
Initiale Fassung
References
-
Icinga Security Announcement vom 2026-01-29
https://icinga.com/blog/releasing-icinga-2-v2-15-2-v2-14-8-v2-13-14-and-icinga-for-windows-v1-13-4-v1-12-4-v1-11-2/
-
Icinga GitHub vom 2026-01-29
https://github.com/Icinga/icinga2/security/advisories/GHSA-vfjg-6fpv-4mmr
-
Icinga GitHub vom 2026-01-29
https://github.com/Icinga/icinga-powershell-framework/security/advisories/GHSA-88h5-rrm6-5973
-
openSUSE Security Update OPENSUSE-SU-2026:10113-1 vom 2026-01-31
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XQ5PNVB647WE3TWZVPPUBXDB2WBN6GPZ/