https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:46:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02056 bdu:2022-02056 https://cve.radiocsirt.org/vuln/bdu:2022-02056 https://cve.radiocsirt.org/vuln/euvd-2026-258293 EUVD-2026-258293 https://cve.radiocsirt.org/vuln/euvd-2026-258293 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32739 <p>Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API users. With a read-ony user&#39;s credentials, an attacker can view most attributes of all config objects including `ticket_salt` of `ApiListener`. This salt is enough to compute a ticket for every possible common name (CN). A ticket, the master node&#39;s certificate, and a self-signed certificate are enough to successfully request the desired certificate from Icinga. That certificate may in turn be used to steal an endpoint or API user&#39;s identity. Versions 2.12.5 and 2.11.10 both contain a fix the vulnerability. As a workaround, one may either specify queryable types explicitly or filter out ApiListener objects.</p> <p>Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API users. With a read-ony user&#39;s credentials, an attacker can view most attributes of all config objects including `ticket_salt` of `ApiListener`. This salt is enough to compute a ticket for every possible common name (CN). A ticket, the master node&#39;s certificate, and a self-signed certificate are enough to successfully request the desired certificate from Icinga. That certificate may in turn be used to steal an endpoint or API user&#39;s identity. Versions 2.12.5 and 2.11.10 both contain a fix the vulnerability. As a workaround, one may either specify queryable types explicitly or filter out ApiListener objects.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32739 https://cve.radiocsirt.org/vuln/gsd-2021-32739 gsd-2021-32739 https://cve.radiocsirt.org/vuln/gsd-2021-32739 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1089-1 <p>Security update for icinga2</p> <p>Security update for icinga2</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1089-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32739 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: icinga2, Ubuntu:18.04:LTS: icinga2, Ubuntu:20.04:LTS: icinga2, Ubuntu:22.04:LTS: icinga2, Ubuntu:24.04:LTS: icinga2, Ubuntu:25.10: icinga2, Ubuntu:26.04:LTS: icinga2</p> <p>Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API users. With a read-ony user&#39;s credentials, an attacker can view most attributes of all config objects including `ticket_salt` of `ApiListener`. This salt is enough to compute a ticket for every possible common name (CN). A ticket, the master node&#39;s certificate, and a self-signed certificate are enough to successfully request the desired certificate from Icinga. That certificate may in turn be used to steal an endpoint or API user&#39;s identity. Versions 2.12.5 and 2.11.10 both contain a fix the vulnerability. As a workaround, one may either specify queryable types explicitly or filter out ApiListener objects.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: icinga2, Ubuntu:18.04:LTS: icinga2, Ubuntu:20.04:LTS: icinga2, Ubuntu:22.04:LTS: icinga2, Ubuntu:24.04:LTS: icinga2, Ubuntu:25.10: icinga2, Ubuntu:26.04:LTS: icinga2</p> <p>Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API users. With a read-ony user&#39;s credentials, an attacker can view most attributes of all config objects including `ticket_salt` of `ApiListener`. This salt is enough to compute a ticket for every possible common name (CN). A ticket, the master node&#39;s certificate, and a self-signed certificate are enough to successfully request the desired certificate from Icinga. That certificate may in turn be used to steal an endpoint or API user&#39;s identity. Versions 2.12.5 and 2.11.10 both contain a fix the vulnerability. As a workaround, one may either specify queryable types explicitly or filter out ApiListener objects.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32739 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3477 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Icinga ausnutzen, um seine Privilegien zu erhöhen und vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Icinga ausnutzen, um seine Privilegien zu erhöhen und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3477