Icinga/icinga-core

Icinga/icinga-core

Releases137

Frequency1 month 1 week

Last Release over 8 years ago

Stars43

Icinga 1.x, the old core (EOL 31.12.2018)

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2017-16882 ↗	Nov 18, 2017Saturday, 18 November 2017, 18:29	—	4.6 MEDIUM
Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account (and similarly can have etc/icinga.cfg owned by a non-root account), which allows local users to gain privileges by leveraging access to this non-root account, a related issue to CVE-2017-14312. This also affects bin/icingastats, bin/ido2db, and bin/log2ido.
CVE-2015-8010 ↗	Mar 27, 2017Monday, 27 March 2017, 17:59	—	4.3 MEDIUM
Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi.