Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade icinga-idoutilsUpgrade icinga-wwwUpgrade icingaUpgrade icinga-plugins-downtimesUpgrade icinga-docUpgrade icinga-develUpgrade monitoring-toolsUpgrade icinga-idoutils-mysqlUpgrade icinga-idoutils-pgsqlUpgrade icinga-idoutils-oracleUpgrade icinga-plugins-eventhandlers | Feb 25, 2014 | Jan 15, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub