Vulnerabilities > CVE-2022-24716 - Unspecified vulnerability in Icinga web 2

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
icinga
NVD
Published: 2022-03-08
Updated: 2024-11-21

Summary

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.

Vulnerable Configurations

Part Description Count
Application
Icinga
1

References