Your submission was sent successfully! Close

CVE-2013-7107

Published: 15 January 2014

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106.

Notes

AuthorNote
mdeslaur
fixing this in stable releases will break compatibility with
some addons and scripts, ignoring.
Priority

Low

Status

Package Release Status
icinga
Launchpad, Ubuntu, Debian
lucid Does not exist

precise Ignored

quantal Ignored

raring Ignored

saucy Ignored

trusty Not vulnerable
(1.10.2-1)
upstream
Released (1.10.2-1)
nagios3
Launchpad, Ubuntu, Debian
lucid Ignored
(reached end-of-life)
precise Ignored

quantal Ignored

raring Ignored

saucy Ignored

trusty Ignored

upstream Needs triage