CVE-2012-3441 in Icinga
Résumé (Anglaise)
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Réserver
14/06/2012
Divulgation
25/08/2012
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 61790 | Icinga élévation de privilèges | 264 | Non défini | Correctif officiel | CVE-2012-3441 |