Vulnerability in Icinga Icinga2
CVE-2021-32743
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions prior to 2.11.10 and from version 2.12.0 through version 2.12.4, some of…
EPSS: 0.004 (58.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Icinga Icinga2 — versions < 2.11.10, >= 2.12.0, <= 2.12.4
Weakness classification (CWE)
References
- github.com/Icinga/icinga2/security/advisories/GHSA-wrpw-pmr8-qgj7 (x_refsource_CONFIRM)
- icinga.com/blog/2021/07/15/releasing-icinga-2-12-5-and-2-11-10/ (x_refsource_MISC)
- [debian-lts-announce] 20211110 [SECURITY] [DLA 2816-1] icinga2 security update (mailing-list, x_refsource_MLIST)
Frequently asked questions
- What is CVE-2021-32743?
- CVE-2021-32743 is a high-severity vulnerability in Icinga Icinga2, classified under CWE-202. CVSS score: 8.8/10. Published 2021-07-15.
- How severe is CVE-2021-32743?
- High severity. CVSS v3 base score is 8.8 out of 10.