CVE-2012-3441 in Icinga
Summary
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
06/14/2012
Disclosure
08/25/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61790 | Icinga access control | 264 | Not defined | Official fix | CVE-2012-3441 |