CVE-2020-14004

Name of the Vulnerable Software and Affected Versions Icinga2 versions prior to 2.12.0-rc1

Description An issue was discovered where the prepare-dirs script, part of the icinga2 systemd service, executes chmod 2750 /run/icinga2/cmd. Since /run/icinga2 is under control of an unprivileged user by default, if /run/icinga2/cmd is a symlink, it will be followed, allowing arbitrary files to be changed to mode 2750 by the unprivileged icinga2 user.

Recommendations For versions prior to 2.12.0-rc1, update to version 2.12.0-rc1 or later to resolve the issue. As a temporary workaround, consider restricting access to the /run/icinga2/cmd directory to prevent the unprivileged icinga2 user from modifying arbitrary files.