Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd service) executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrary files can be changed to mode 2750 by the unprivileged icinga2 user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Icinga 后置链接漏洞
Vulnerability Description
Icinga是德国Icinga公司的一套可扩展的服务器、网络资源监控系统。 Icinga2 2.12.0-rc1之前版本中的的prepare-dirs脚本存在安全漏洞。攻击者可利用该漏洞将任意文件更改为2750模式。
CVSS Information
N/A
Vulnerability Type
N/A