Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Icinga DB Web hidden/protected custom variables are prone to filter enumeration
Vulnerability Description
Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values assigned to it. Versions 1.1.4 and 1.2.3 respond with an error if such a custom variable is used.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
响应差异性信息暴露
Vulnerability Title
Icinga DB Web 安全漏洞
Vulnerability Description
Icinga DB Web是Icinga开源的一个Icinga DB数据库的图形界面。 Icinga DB Web 1.1.4之前版本和1.2.3之前版本存在安全漏洞，该漏洞源于授权用户可通过自定义变量猜测受保护或隐藏变量的值。
CVSS Information
N/A
Vulnerability Type
N/A