Your submission was sent successfully! Close

CVE-2013-7107

Published: 15 January 2014

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106.

Priority

Low

Status

Package Release Status
icinga
Launchpad, Ubuntu, Debian
Upstream
Released (1.10.2-1)
Ubuntu 14.04 ESM (Trusty Tahr) Not vulnerable
(1.10.2-1)
nagios3
Launchpad, Ubuntu, Debian
Upstream Needs triage

Ubuntu 14.04 ESM (Trusty Tahr) Ignored

Notes

AuthorNote
mdeslaur
fixing this in stable releases will break compatibility with
some addons and scripts, ignoring.

References

Bugs