Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade icinga-plugins-eventhandlersUpgrade icinga-idoutils-oracleUpgrade icinga-idoutils-pgsqlUpgrade icinga-idoutils-mysqlUpgrade monitoring-toolsUpgrade icinga-plugins-downtimesUpgrade icinga-idoutilsUpgrade icinga-wwwUpgrade icinga-develUpgrade icinga-docUpgrade icinga | Feb 25, 2014 | Jan 15, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub