Vulnerability in Icinga

CVE-2012-3441

The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.

EPSS: 0.024 (82.4th percentile) — read the EPSS interpretation.

Affected products

  • Icinga — versions 1.7.1
  • N/a — versions n/a

Weakness classification (CWE)

References