CVE-2018-6533

Name of the Vulnerable Software and Affected Versions Icinga versions 2.x through 2.8.1

Description An issue was discovered that allows Icinga 2 to be run as root by editing the init.conf file, enabling the program to execute arbitrary code as root. This issue was resolved by changing how account information is determined for root-executed code.

Recommendations For Icinga versions 2.x through 2.8.1, update the software to a version where the issue of using init.conf to determine account information for root-executed code has been fixed.