Test ID:	1.3.6.1.4.1.25623.1.0.140595
Category:	Privilege escalation
Title:	Icinga Privilege Escalation Vulnerability
Summary:	Icinga is prone to a local privilege escalation vulnerability.
Description:	Summary: Icinga is prone to a local privilege escalation vulnerability. Vulnerability Insight: Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account (and similarly can have etc/icinga.cfg owned by a non-root account), which allows local users to gain privileges by leveraging access to this non-root account. Affected Software/OS: Icinga 1.14.0 and prior. Solution: Update to version 1.14.1 or later. CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-16882 https://security.gentoo.org/glsa/202007-31 https://github.com/Icinga/icinga-core/issues/1601
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.