PT-2018-17617
CVE-2018-6533
·
تاريخ النشر
2018-02-27
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Icinga versions 2.x through 2.8.1
Description
An issue was discovered that allows Icinga 2 to be run as root by editing the init.conf file, enabling the program to execute arbitrary code as root. This issue was resolved by changing how account information is determined for root-executed code.
Recommendations
For Icinga versions 2.x through 2.8.1, update the software to a version where the issue of using init.conf to determine account information for root-executed code has been fixed.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾