ID de Prueba:	1.3.6.1.4.1.25623.1.0.113702
Categoría:	Privilege escalation
Título:	Icinga 2 < 2.12.0-rc1 Privilege Escalation Vulnerability
Resumen:	Icinga 2 is prone to a privilege escalation vulnerability.
Descripción:	Summary: Icinga 2 is prone to a privilege escalation vulnerability. Vulnerability Insight: If /run/icinga2/cmd is a symlink, then it will be followed and arbitrary files can be changed to mode 2750 by the unprivileged icinga2 user. Vulnerability Impact: Successful exploitation would allow an attacker to read sensitive information or gain elevated privileges. Affected Software/OS: Icinga 2 version 2.11.3 and prior. Solution: Update to version 2.12.0-rc1 or later. CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-14004 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-14004 https://github.com/Icinga/icinga2/compare/v2.12.0-rc1...master https://github.com/Icinga/icinga2/pull/8045/commits/2f0f2e8c355b75fa4407d23f85feea037d2bc4b6 https://github.com/Icinga/icinga2/releases SuSE Security Announcement: openSUSE-SU-2020:1820 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00014.html
Copyright	Copyright (C) 2020 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.