Skip to content
OpenAdvisories

Package · Alpine

icingaweb2

3 known vulnerabilities.

3 results · Feed

  • Medium 5.3

    Custom variable protection and blacklists can be circumvented

    Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which custom variables are exposed to unauthorized users exists between versions 2.0.0 and 2.8.2. Custom variables are user-defined keys and val…

  • Medium 5.3

    Possible path traversal by use of the `doc` module

    Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the `doc` module of Icinga Web 2 allows to view documentation directly in the UI. It must be enabled manually by an administrator …

  • Unscored —

    Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacke…