Test ID:	1.3.6.1.4.1.25623.1.0.113702
Category:	Privilege escalation
Title:	Icinga 2 < 2.12.0-rc1 Privilege Escalation Vulnerability
Summary:	Icinga 2 is prone to a privilege escalation vulnerability.
Description:	Summary: Icinga 2 is prone to a privilege escalation vulnerability. Vulnerability Insight: If /run/icinga2/cmd is a symlink, then it will be followed and arbitrary files can be changed to mode 2750 by the unprivileged icinga2 user. Vulnerability Impact: Successful exploitation would allow an attacker to read sensitive information or gain elevated privileges. Affected Software/OS: Icinga 2 version 2.11.3 and prior. Solution: Update to version 2.12.0-rc1 or later. CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-14004 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-14004 https://github.com/Icinga/icinga2/compare/v2.12.0-rc1...master https://github.com/Icinga/icinga2/pull/8045/commits/2f0f2e8c355b75fa4407d23f85feea037d2bc4b6 https://github.com/Icinga/icinga2/releases SuSE Security Announcement: openSUSE-SU-2020:1820 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00014.html
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.